Not rated
CVE-2021-25065 The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed…
Description
The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Smash Balloon Social Post Feed 4.1 | earliest → < 4.1.1 | 4.1.1 |
Other CVEs of Smash Balloon Social Post Feed
The 4 CVEs of Smash Balloon Social Post Feed →
CVE-2022-4477
The Smash Balloon Social Post Feed WordPress plugin before 4.1.6 does not validate and escapes some of its shortcode…
5.4
Medium
CVE-2021-24918
The Smash Balloon Social Post Feed WordPress plugin before 4.0.1 did not have any privilege or nonce validation before…
Not rated
CVE-2021-24508
The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST…
Not rated