Vulnerability issue with tagDiv Cloud Library v3.9.2

Posted in: Newspaper
Post count: 5
just_nAnO
#536221
Oct 27, 2025 at 6:06 pm

Hi, hope you can check this.

Vulnerability issue.

Cross Site Scripting (XSS)
vulnerability discovered by
João Pedro S Alcântara
(Kinorth) in WordPress Plugin
tagDiv Cloud Library
(versions < 3.9.2)

tagDiv Cloud Library vulnerability issue

tagDiv Cloud Library vulnerability issue

Any update?
Thanks in advance.

  • This topic was modified 9 months by just_nAnO.
  • This topic was modified 9 months by just_nAnO.
Post count: 35449
Calin
#536231
Oct 28, 2025 at 8:29 am

Hi,

As you can see in the patchstack, the vulnerability is only present in versions prior to version 3.9.2. https://i.imgur.com/VIhPXwj.png

Thank you!

Post count: 3
Kayyali Mohamed
#536248
Oct 28, 2025 at 3:08 pm

i haev same problem

Post count: 3
Kayyali Mohamed
#536249
Oct 28, 2025 at 3:29 pm

please we need to fix this ASAP

Post count: 35449
Calin
#536253
Oct 28, 2025 at 4:07 pm

Hi Kayyali Mohamed,

If you have Newspaper version 12.7.3 then the problem is resolved. If you have a different theme version, please make a backup of your website and update the theme.

Thank you!

Post count: 3
Kayyali Mohamed
#536323
Oct 30, 2025 at 1:06 pm

even we have last version of the theme we still get same error

Post count: 35449
Calin
#536335
Oct 30, 2025 at 4:15 pm

I understand, it is possible that some tools do not interpret < 3.9.2 correctly, they may interpret it as <= 3.9.2. What can be done is to manually change the version of the plugin https://i.imgur.com/UCoxmI2.png

Viewing 7 posts - 1 through 7 (of 7 total)
The forum ‘Newspaper’ is closed to new topics and replies.