CVE-2011-1129

LOW · CVSS 3.5 EPSS 1.00%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-06-21 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2011-1129

Severity

LOW

CVSS

3.5

EPSS

1.00%

Original Filing — NVD Description

Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.