Published:2015/01/30  Last Updated:2015/01/30

Information from Nishishi Factory

Vulnerability ID:JVN#33735535
Title:Fumy News Clipper vulnerable to cross-site scripting
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.

The Weblog CGI "Fumy News Clipper2" (Ver 2.4.0 and earlier) contains a cross-site scripting vulnerability.
This issue has been resolved in Ver 2.5.0.
Please update to the latest version.

For more information on this issue, please refer to the following URL (Written in Japanese).
http://www.nishishi.com/cgi/newsclip/20150130.html