6.5
Medium
CVE-2023-28493 Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes NewsMag theme <= 2.4.4 versions
Description
Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes NewsMag theme <= 2.4.4 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NewsMag 2.4 | earliest → 2.4.4 | No fix stated |