medium6.1
CVE-2021-3135
An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress.
Impact
An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via the wp-admin/admin-ajax.php td_block_id parameter in a td_ajax_block API call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tagdiv | Newspaper | Version 10.3.9.1 |