HighCVSS 10.0
EPSS 2.6%
MicroNews allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin.php.