New flaws have been identified in NewsPortal that can be used to conduct cross-site scripting attacks by malicious users.