Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:6 a.m.9 views

CVE-2023-6801

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.2 due to insufficient input sanitization and output escaping. This makes ...

6.4CVSS5.8AI score0.00315EPSS
Exploits0References1
Circl
Circl
added 2024/01/06 11:21 a.m.6 views

CVE-2023-6801

creationtimestamp| type| source ---|---|--- 2024-01-06 11:21:28+00:00| seen| https://t.me/ctinow/163908 2024-01-09 08:35:02+00:00| seen| https://t.me/arpsyndicate/2733 2024-01-24 16:46:59+00:00| seen| https://t.me/ctinow/172904...

6.4CVSS6.7AI score0.00315EPSS
Exploits0References3
NVD
NVD
added 2024/01/06 10:15 a.m.28 views

CVE-2023-6801

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.2 due to insufficient input sanitization and output escaping. This makes ...

6.4CVSS5.7AI score0.00315EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/01/06 9:38 a.m.34 views

CVE-2023-6801 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.2 due to insufficient input sanitization and output escaping. This makes ...

6.4CVSS5.9AI score0.00315EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/06 9:38 a.m.19 views

CVE-2023-6801 RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting

The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.2 due to insufficient input sanitization and output escaping. This makes ...

6.4CVSS6.8AI score0.00315EPSS
Exploits0References2
CVE
CVE
added 2024/01/06 9:38 a.m.45 views

CVE-2023-6801

CVE-2023-6801 affects RSS Aggregator by Feedzy – Feed to Post (WordPress) and is a Stored XSS vulnerability caused by insufficient input sanitization and output escaping in admin settings. Affected versions are up to and including 4.3.2; Patch 4.3.3 fixes the issue. The CVE is corroborated by mul...

6.4CVSS5.2AI score0.00315EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder