Vulnerabilities > Tagdiv > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-08-09 CVE-2021-24304 Cross-site Scripting vulnerability in Tagdiv Newsmag
The Newsmag WordPress theme before 5.0 does not sanitise the td_block_id parameter in its td_ajax_block AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.
network
tagdiv CWE-79
4.3
2021-07-19 CVE-2021-3135 Cross-site Scripting vulnerability in Tagdiv Newspaper 10.3.9.1
An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress.
network
tagdiv CWE-79
4.3