6.2 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.1%
Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for (1) rss_fetch.inc.php or (2) rss_parse.inc.php, which reveals the path in various error messages.
securityreason.com/securityalert/1564
www.securityfocus.com/archive/1/445729/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/28858