CutePHP.com CuteNews

• CVE-2020-5558 Unrated CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors. 2.1%
• CVE-2020-5557 Unrated Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. 0.8%