CVE-2021-24342: Improper Neutralization of Input During Web Page Generation

The JNews WordPress theme before 8.0.6 did not sanitise the catid parameter in the POST request /?ajax-request=jnews with action=jnewsbuildmegacategory, leading to a Reflected Cross-Site Scripting XSS issue...

PT-2021-15878

Name of the Vulnerable Software and Affected Versions JNews WordPress theme versions prior to 8.0.6 Description The issue is related to a Reflected Cross-Site Scripting XSS problem. It occurs because the cat id parameter in the POST request to the / endpoint with ajax-request=jnews and action=jne...