CVE-2021-24508

The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST parameter in its feedlocator AJAX action available to both authenticated and unauthenticated users before outputting a truncated version of it in the admin dashboard, leading to an...

CVE-2021-24508

The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST parameter in its feedlocator AJAX action available to both authenticated and unauthenticated users before outputting a truncated version of it in the admin dashboard, leading to an...

PT-2021-16030

Name of the Vulnerable Software and Affected Versions Smash Balloon Social Post Feed WordPress plugin versions prior to 2.19.2 Description The issue concerns a Stored Cross-Site Scripting problem. It arises because the feedID POST parameter in the feed locator AJAX action is not properly sanitize...