CVE-2026-2162

2.0 lowEPSS 0.4%

Low (2.0) in clive 21 news portal project. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2026-02-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

clive_21:news_portal_project

References

https://github.com/Wzl731/test/issues/2
https://itsourcecode.com/
https://vuldb.com/?ctiid.344864
https://vuldb.com/?id.344864
https://vuldb.com/?submit.751083

Check your stack JSON