Non notée
CVE-2021-25065 The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed…
Description
The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Smash Balloon Social Post Feed 4.1 | premières → < 4.1.1 | 4.1.1 |
Autres CVE de Smash Balloon Social Post Feed
Les 4 CVE de Smash Balloon Social Post Feed →
CVE-2022-4477
The Smash Balloon Social Post Feed WordPress plugin before 4.1.6 does not validate and escapes some of its shortcode…
5.4
Moyenne
CVE-2021-24918
The Smash Balloon Social Post Feed WordPress plugin before 4.0.1 did not have any privilege or nonce validation before…
Non notée
CVE-2021-24508
The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST…
Non notée