{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3anewsmannewsmanappwordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:newsman:newsmanapp:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-115821"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["NewsmanApp (\u003c= 3.7.29)"],"_cs_severities":["high"],"_cs_tags":["xss","wordpress","plugin"],"_cs_type":"advisory","_cs_vendors":["Newsman"],"content_html":"\u003cp\u003eThe NewsmanApp plugin for WordPress (versions up to and including 3.7.29) is vulnerable to stored Cross-Site Scripting (XSS). An unauthenticated attacker can exploit this via the 'billing_first_name' and 'billing_last_name' parameters. Successful exploitation requires the Newsman Remarketing feature to be enabled and a non-empty Remarketing ID to be configured. The vulnerability stems from insufficient input sanitization and output escaping.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for the execution of arbitrary JavaScript in the context of an affected user's browser, potentially leading to session hijacking, unauthorized actions, or information theft when an administrator or user views the compromised page.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the NewsmanApp plugin for WordPress to a version patched beyond 3.7.29.\u003c/li\u003e\n\u003cli\u003eDisable the Newsman Remarketing feature as an interim mitigation if updating is not immediately possible.\u003c/li\u003e\n\u003cli\u003eAudit WordPress web server access logs for anomalous POST requests directed at the plugin functionality, specifically those containing HTML or script tags within billing fields.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T13:18:09Z","date_published":"2026-10-29T13:18:09Z","id":"https://feed.craftedsignal.io/briefs/2026-10-newsmanapp-xss/","summary":"The NewsmanApp WordPress plugin contains a stored Cross-Site Scripting vulnerability in billing parameters that allows unauthenticated attackers to execute arbitrary scripts in the context of a user session.","title":"NewsmanApp: Stored Cross-Site Scripting via input parameters (CVE-2026-115821)","url":"https://feed.craftedsignal.io/briefs/2026-10-newsmanapp-xss/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:newsman:newsmanapp:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}