EUVD-2010-1759

Malware in sbrugna...

CVE-2021-24508

The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST parameter in its feedlocator AJAX action available to both authenticated and unauthenticated users before outputting a truncated version of it in the admin dashboard, leading to an...

PT-2021-16030

Name of the Vulnerable Software and Affected Versions Smash Balloon Social Post Feed WordPress plugin versions prior to 2.19.2 Description The issue concerns a Stored Cross-Site Scripting problem. It arises because the feedID POST parameter in the feed locator AJAX action is not properly sanitize...

CVE-2021-24508: Improper Neutralization of Input During Web Page Generation

The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST parameter in its feedlocator AJAX action available to both authenticated and unauthenticated users before outputting a truncated version of it in the admin dashboard, leading to an...

Smash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSS

The plugin does not sanitise or escape the feedID POST parameter in its feedlocator AJAX action available to both authenticated and unauthenticated users before outputting a truncated version of it in the admin dashboard, leading to an unauthenticated Stored Cross-Site Scripting issue which will ...

Joomla! component com_newsfeeds 'feedid' SQL injection vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in the Joomla! component comnewsfeeds 'feedid'. An attacker can exploit this vulnerability to execute illegal SQL commands...

CVE-2010-1739: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Newsfeeds comnewsfeeds component for Joomla! allows remote attackers to execute arbitrary SQL commands via the feedid parameter in a categories action to index.php...