Read the docs

One-news

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

One-news records in CISA KEV

No One-news vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the (1) title or (2) content parameters in a news item to add.php, and the (3) ite…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01109 Published 2009-08-24 No fix listed CWE-79
Open these records in search →