PT-2021-15841

Name of the Vulnerable Software and Affected Versions Newsmag WordPress theme versions prior to 5.0 Description The issue is related to an unauthenticated Reflected Cross-site Scripting XSS vulnerability. This occurs because the td block id parameter in the td ajax block AJAX action is not proper...

PT-2021-19252

Name of the Vulnerable Software and Affected Versions tagDiv Newspaper theme version 10.3.9.1 Description The issue allows for XSS via the td block id parameter in a td ajax block API call to the "wp-admin/admin-ajax.php" endpoint. This enables potential attackers to inject malicious scripts into...