Lucene search

K
patchstackDc11PATCHSTACK:FCCEB472ED396CB519CBE4EB9E3352D3
HistoryAug 16, 2021 - 12:00 a.m.

WordPress Smash Balloon Social Post Feed plugin <= 2.19.1 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

2021-08-1600:00:00
dc11
patchstack.com
9
wordpress
smash balloon
cross-site scripting
vulnerability
update

EPSS

0.002

Percentile

54.9%

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by dc11 in WordPress Smash Balloon Social Post Feed plugin (versions <= 2.19.1).

Solution

           Update the WordPress Smash Balloon Social Post Feed plugin to the latest available version (at least 2.19.2).

EPSS

0.002

Percentile

54.9%

Related for PATCHSTACK:FCCEB472ED396CB519CBE4EB9E3352D3