Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Newspaper 12 Clear all filters
TI-2022-02429 CVE-2022-2627 · GHSA-cv99-5mw3-f7q3

Newspaper < 12 - Reflected Cross-Site Scripting

Priority MEDIUM 60

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01328 Published 2022-10-31 Fixed in 12 CWE-79
TI-2022-02005 CVE-2022-2167 · GHSA-5hp7-8m7g-vwm9

Newspaper < 12 - Reflected Cross-Site Scripting

Priority MEDIUM 60

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00684 Published 2022-10-31 Fixed in 12 CWE-79