https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-3537.htmlhttps://patchthecve.com/cve/CVE-2023-3537.htmlWed, 17 Jun 2026 06:14:18 +0000LOW 3.5: A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The idenhttps://patchthecve.com/cve/CVE-2020-25475.htmlhttps://patchthecve.com/cve/CVE-2020-25475.htmlWed, 17 Jun 2026 03:06:51 +0000CRITICAL 9.8: SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.https://patchthecve.com/cve/CVE-2020-25474.htmlhttps://patchthecve.com/cve/CVE-2020-25474.htmlWed, 17 Jun 2026 03:06:50 +0000MEDIUM 6.1: SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.https://patchthecve.com/cve/CVE-2020-25473.htmlhttps://patchthecve.com/cve/CVE-2020-25473.htmlWed, 17 Jun 2026 03:06:50 +0000MEDIUM 6.5: SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.https://patchthecve.com/cve/CVE-2020-25472.htmlhttps://patchthecve.com/cve/CVE-2020-25472.htmlWed, 17 Jun 2026 03:06:50 +0000MEDIUM 6.5: SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.