TI-2013-03081 CVE-2013-3524 · GHSA-qfpc-6pg9-h7hvSQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly…Priority LOW 38SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02567 · Published 2013-05-10 · No fix listed CWE-89