CVE-2011-1129

2011-06-2101:00:00

mitre

www.cve.org

cross-site scripting

smf

vulnerability

web script

html

authenticated users

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

41.8%

JSON

Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.