mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-22 14:06:54 +02:00
788 B
788 B
CVE-2021-24304
Description
The Newsmag WordPress theme before 5.0 does not sanitise the td_block_id parameter in its td_ajax_block AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.