tagDiv Composer Plugin <= 5.4.1 is vulnerable to Cross Site Scripting (XSS)

Posted in: Newspaper
Post count: 23
DavidFHenry
#535963
Oct 21, 2025 at 11:56 am

Hi Guys,

Any idea when 5.4.2 will be available?

https://patchstack.com/database/wordpress/plugin/td-composer/vulnerability/wordpress-tagdiv-composer-plugin-5-4-1-cross-site-scripting-xss-vulnerability?_a_id=350

Post count: 35449
Calin
#535968
Oct 21, 2025 at 4:21 pm

Hi,
It appears that the changes have been made in Newspaper v12.7.2, but the developers forgot to update the plugin version from 5.4.1 to 5.4.2. We’ll release a new update in the coming days to resolve this situation.
Thank you!

Viewing 2 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic.