Unscored CVE-2007-3330 EUVD-2007-3320GHSA-4hf8-w7gm-6656

Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web script or HTML via a new…

Published Jun 21, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web script or HTML via a news post, which is stored in news/ without sanitization.

References

24512 vdb-entry
easynews-unspecified-xss(34892) vdb-entry
2829 third-party-advisory
36472 vdb-entry
20070617 H4CREW-000005 EasyNews Pro 4.0 XSS & CSRF mailing-list