CVE-2016-10999: Momizat Goodnews

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The Goodnews theme through 2016-02-28 for WordPress has XSS via the s parameter.

Affected products

• Momizat Goodnews: version 2016-02-28 only

Published 2019-09-20. Last modified 2026-06-17.