CVE-2021-24304

The Newsmag WordPress theme before 5.0 does not sanitise the tdblockid parameter in its tdajaxblock AJAX action, leading to an unauthenticated Reflected Cross-site Scripting XSS vulnerability...

CVE-2021-24304

The Newsmag WordPress theme before 5.0 does not sanitise the tdblockid parameter in its tdajaxblock AJAX action, leading to an unauthenticated Reflected Cross-site Scripting XSS vulnerability...

PT-2021-15841

Name of the Vulnerable Software and Affected Versions Newsmag WordPress theme versions prior to 5.0 Description The issue is related to an unauthenticated Reflected Cross-site Scripting XSS vulnerability. This occurs because the td block id parameter in the td ajax block AJAX action is not proper...

CVE-2021-24304: Improper Neutralization of Input During Web Page Generation

The Newsmag WordPress theme before 5.0 does not sanitise the tdblockid parameter in its tdajaxblock AJAX action, leading to an unauthenticated Reflected Cross-site Scripting XSS vulnerability...