CVE-2023-28493

Auth subscriber+ Reflected Cross-Site Scripting XSS vulnerability in Macho Themes NewsMag theme = 2.4.4 versions...

CVE-2023-28493

creationtimestamp| type| source ---|---|--- 2023-05-08 18:38:02+00:00| seen| https://t.me/cibsecurity/63446...

CVE-2023-28493

CVE-2023-28493 affects the WordPress plugin/theme combination: Macho Themes NewsMag theme versions ≤ 2.4.4 suffer a reflected XSS vulnerability that requires subscriber-level access and user interaction. The public-facing impact is an XSS in NewsMag’s handling of input, with no explicit exploit d...

WordPress Newsmag Theme <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Newsmag Type Theme Vulnerable versions = 2.4.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28493 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID 919e42815591 Credits Brandon Roldan Required privileg...