CVE-2023-28493: Machothemes Newsmag

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes NewsMag theme <= 2.4.4 versions.

Affected products

• Machothemes Newsmag: up to and including 2.4.4

Published 2023-05-08. Last modified 2026-06-17.