Reflected Cross-Site Scripting (XSS) vulnerab

Posted in: Newsmag
Post count: 54
asisrodriguez
#469664
Mar 16, 2023 at 6:16 pm

Hello, I received this advice form my ISP:
WordPress NewsMag theme <= 2.4.4 – Reflected Cross-Site Scripting (XSS) vulnerability
PLease, help to fix. Thanks
Asis

Post count: 20
halloway
#469665
Mar 16, 2023 at 6:18 pm

Same issue here. Please advise.

Post count: 35449
Calin
#469688
Mar 17, 2023 at 8:20 am

Hi,
If you have a Newsmag theme that has v 2.4.4 or under that version my suggestion is to make a full backup for the website and database and after that to update the theme to the last version (v5.3).
Another suggestion is to use a plugin like this one https://wordpress.org/plugins/prevent-xss-vulnerability/
Thank you!

Post count: 20
halloway
#469693
Mar 17, 2023 at 8:34 am

Calin,

The interesting thing here is that I do have 5.3 installed and it is weird that WP Toolkit ( c-panel ) refer to 2.4.4.

Could it be that the theme folder might have files from the 2.4.4. version?

  • This reply was modified 3 years by halloway.
Post count: 54
asisrodriguez
#469696
Mar 17, 2023 at 8:40 am

Exacly the same issu, v 5.3

Post count: 20
halloway
#469698
Mar 17, 2023 at 8:43 am

https://patchstack.com/database/vulnerability/newsmag/wordpress-newsmag-theme-2-4-4-reflected-cross-site-scripting-xss-vulnerability?_a_id=110

Post count: 35449
Calin
#469777
Mar 17, 2023 at 4:20 pm

Hello,
I understand. I have sent these details to the developers and they will check this situation as soon as possible.
Thank you!

Post count: 54
asisrodriguez
#469809
Mar 18, 2023 at 7:57 am

thanks very much.

Viewing 8 posts - 1 through 8 (of 8 total)
You must be logged in to reply to this topic.