A non-critical cross site scripting bug has been discovered in CuteNews version 1.3.6 and below.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34253/hackgen-2004-001.txt
Source: https://packetstormsecurity.com/files/34253/Hackgen-Security-Advisory-2004.1.html