Security Advisory

CVE-2021-24304

6.1
MEDIUM

Vulnerability Description

The Newsmag WordPress theme before 5.0 does not sanitise the td_block_id parameter in its td_ajax_block AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.
Published Date August 9, 2021
Official Source NIST NVD Advisory