Not rated
CVE-2021-25047 The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS)…
Description
The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulnerability in the wdi_apply_changes admin page, allowing an attacker to perform such attack against any logged in users
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 10Web Social Photo Feed 1.4 | earliest → < 1.4.29 | 1.4.29 |