Lucene search
Krzysztof ZającPATCHSTACK:A4DC87C1F1C248B3DFA20C0834AE0D4DHistoryDec 16, 2021 - 12:00 a.m.
WordPress Smash Balloon Social Post Feed plugin <= 4.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
2021-12-1600:00:00
Krzysztof Zając
patchstack.com
8
0.001 Low
EPSS
Percentile
30.3%
Authenticated Reflected Cross-Site Scripting (XSS) vulnerability discovered by Krzysztof Zając in WordPress Smash Balloon Social Post Feed plugin (versions <= 4.1).
Solution
Update the WordPress Smash Balloon Social Post Feed plugin to the latest available version (at least 4.1.1).
| CPE | Name | Operator | Version |
|---|---|---|---|
| smash balloon social post feed | le | 4.1 |
Related
wpvulndb
wpvulndb
nvd
nvd
CVE-2021-25065
2022-01-17 13:15:08
prion
prion
Cross site scripting
2022-01-17 13:15:00
openvas
openvas
WordPress Smash Balloon Social Post Feed Plugin < 4.1.1 XSS Vulnerability
2022-01-18 00:00:00
cvelist
cvelist
cve
cve
CVE-2021-25065
2022-01-17 13:15:08
nuclei
nuclei
wpexploit
wpexploit