CVE-2021-24304

The CVE affects the WordPress theme Newsmag prior to version 5.0 , where the parameter td_block_id is not sanitised in the td_ajax_block AJAX action, enabling an unauthenticated Reflected XSS . Impact is reflected XSS without authentication; PoC shows the issue being exploitable via the admin-aja...