The Newspaper WordPress theme before 12 does not sanitise...
Moderate severity
Unreviewed
Published
Oct 31, 2022
to the GitHub Advisory Database
•
Updated Jan 30, 2023
Description
Published by the National Vulnerability Database
Oct 31, 2022
Published to the GitHub Advisory Database
Oct 31, 2022
Last updated
Jan 30, 2023
The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting.
References