Lucene search

WordPress RSS feed with featured images | RSS Chimp Plugin < 1.2.5 is vulnerable to Cross Site Scripting (XSS)

🗓️ 18 Jul 2023 00:00:00Reported by Rafie Muhammad (Patchstack)Type

WordPress RSS feed with featured images plugin vulnerable to Cross Site Scripting (XSS) | Patch version < 1.2.

Reporter	Title	Published	Views	Family All 200
WPVulnDB	Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting	25 Jul 202300:00	–	wpvulndb
Patchstack	WordPress Live TV Player – Worldwide Live TV Channels Player for WordPress Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress WebinarIgnition Plugin < 3.01.3 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Ultimate Custom ScrollBar Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)	19 Jul 202300:00	–	patchstack
Patchstack	WordPress Gallery PhotoBlocks Plugin < 1.3.0 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress PageManager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress TinyMCE Annotate Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Copy Anything to Clipboard Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress WP Simple Maintenance & Under Construction Mode Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack
Patchstack	WordPress Insert or Embed Articulate Content into WordPress Plugin <= 4.3000000020 is vulnerable to Cross Site Scripting (XSS)	18 Jul 202300:00	–	patchstack

Vulners

Node

kerosindigital rss_feed_with_featured_images_\|_rss_chimpRange<1.2.5

Source	Link
wordpress	www.wordpress.org/plugins/rss-chimp/
cve	www.cve.org/CVERecord
patchstack	www.patchstack.com/site-wide-reflected-xss-in-freemius-wordpress-sdk-affecting-millions-of-sites/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Jul 2023 00:00Current

6.2Medium risk

Vulners AI Score6.2