Newsbee Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Newsbee Project records in CISA KEV

No Newsbee Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2017-03885 CVE-2017-5971 · GHSA-j87v-47r2-3834

MEDIUM 46

SQL injection vulnerability in NewsBee CMS allow remote attackers to execute arbitrary SQL commands.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01741 Published 2018-01-08 No fix listed CWE-89

TI-2018-04098 CVE-2018-5687 · GHSA-cwq7-g5wv-68wr

LOW 23

NewsBee allows XSS via the Company Name field in the Settings under admin/admin.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00516 Published 2018-01-14 No fix listed CWE-79