CVE-2023-28493

Auth subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Macho Themes NewsMag theme = 2.4.4 versions...

CVE-2023-28493

CVE-2023-28493 affects the WordPress plugin/theme combination: Macho Themes NewsMag theme versions ≤ 2.4.4 suffer a reflected XSS vulnerability that requires subscriber-level access and user interaction. The public-facing impact is an XSS in NewsMag’s handling of input, with no explicit exploit d...

PT-2023-21757 · Macho Themes · Newsmag

Name of the Vulnerable Software and Affected Versions: Macho Themes NewsMag theme versions = 2.4.4 Description: The issue is related to a Reflected Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading...