WordPress tagDiv Cloud Library plugin <= 3.9.4 – Cross Site Scripting (XSS) vulnerability???

Ex: https://www.infomaroc.net/lepargne-nationale-a-314-du-pib-au-t2-2022/

I would like to clarify an important point: on two of the affected websites, I am not using AMP nor the tagDiv Mobile Theme plugin. However, the issue is exactly the same.

Hello,

I am experiencing the exact same issue on four different websites using Newspaper.

In Google Search Console, thousands of URLs appear as 404 errors with parameters such as:

{{post_cat_link}}
{{post_url}}
{{td_query_all_results}}

Two of my sites use AMP, but the other two do not use AMP at all, and the issue still occurs on all four websites.

These URLs are not present in the sitemap, are not indexed, and no referring page is detected in Search Console. However, whenever I start the validation process, Google rechecks the URLs and the 404 errors keep reappearing.

I have already:

Checked permalink settings

Verified the sitemap

Inspected the source code

Revalidated multiple times

The issue still persists.

Is this a known bug related to templates, AJAX modules, or internal placeholder handling in the theme?
Is there an official fix recommended by the tagDiv team?

Thank you in advance for your support.

Thanks i can use it as RTL, just some trick to change in the theme panel; turn some sidebar from right to left and its done; you can check my website http://www.albanate.com, i just need to make float to left for some elements; but its ok; it work just perfect. My only issue is with Mobile theme, it need some adjustment you can check my website to see if you can give me some assistance please; the theme can work as RTL easily without adding anything to css. For the header i switch to center logo and it work fine, please can you help me to make it work with the mobile theme; i am preparing a tutorial on how to build an RTL website with newspaper; i just need your help with Mobile.

Thanks a lot