Lucene search
WPScanCVELIST:CVE-2021-24304HistoryAug 09, 2021 - 10:04 a.m.
CVE-2021-24304 Newsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)
2021-08-0910:04:04
CWE-79
WPScan
www.cve.org
1
0.001 Low
EPSS
Percentile
45.7%
The Newsmag WordPress theme before 5.0 does not sanitise the td_block_id parameter in its td_ajax_block AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.
CNA Affected
[
{
"product": "Newsmag",
"vendor": "Unknown",
"versions": [
{
"lessThan": "5.0",
"status": "affected",
"version": "5.0",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2021-24304
2021-08-09 10:15:07
wpvulndb
wpvulndb
Newsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)
2021-07-12 00:00:00
cve
cve
CVE-2021-24304
2021-08-09 10:15:07
wpexploit
wpexploit
Newsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)
2021-07-12 00:00:00
prion
prion
Cross site scripting
2021-08-09 10:15:00