| Package | Affected versions | Patched versions |
|---|---|---|
| fantastic news | = 2.1.1= 2.1.2= 2.1.3= 2.1.5 |
PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter. NOTE: it was later reported that 2.1.5 is also affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free