CVE-2023-2470 Add to Feedly <= 1.2.11 - Admin+ Stored XSS

The Add to Feedly WordPress plugin through 1.2.11 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2023-2470

The CVE-2023-2470 entry concerns the Add to Feedly WordPress plugin (

CVE-2023-2470 Add to Feedly <= 1.2.11 - Admin+ Stored XSS

The Add to Feedly WordPress plugin through 1.2.11 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress plugin Add to Feedly 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

PT-2023-19744 · WordPress · Add To Feedly Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Add to Feedly WordPress plugin versions 1.2.11 and earlier Description: The issue allows high-privilege users, such as admins, to perform Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitize and escape...

WordPress Add to Feedly Plugin <= 1.2.11 is vulnerable to Cross Site Scripting (XSS)

Software Add to Feedly Type Plugin Vulnerable versions = 1.2.11 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2470 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 4f81f7838f2e Credits Fioravante Souza WPScan...

Add to Feedly <= 1.2.11 - Admin+ Stored XSS

The plugin does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. Install the plugin and insert the following payload in the field "Feed URL http://...": 1"alert1 Save th...

Add to Feedly <= 1.2.11 - Admin+ Stored XSS

The plugin does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Install the plugin and insert the following payload in the field "Feed URL http://...": 1" Save the...

gReader | Feedly | News | RSS - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application gReader | Feedly | News | RSS published at the 'play' market has multiple vulnerabilities...

feedly: your work newsfeed - Customized SSL, Exported ContentProvider, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application feedly: your work newsfeed published at the 'play' market has multiple vulnerabilities...

Feedly and Evernote Hit by DDoS Attacks, Extortion Demands

Yesterday, the most popular RSS reader Feedly was down as a result of a large scale distributed-denial-of service DDoS attack carried by the cybercriminals to extort money. On Wednesday, the Feedly was temporarily unavailable for its users. Feedly posted details of the attack at 5:00 AM ET on its...

DDoS Attacks Take Down Evernote, Feedly

UPDATED — News aggregator Feedly is still offline Thursday as continues to battle a series of distributed denial of service attacks that’s kept the service down for two consecutive days. The site was able to get back online shortly after 3 p.m. Wednesday after it neutralized the first DDoS attack...

Feedly Android App Javascript Injection vulnerability exposes Millions of Users to Hackers

When it comes to Android apps, even the simplest app could greatly compromise your privacy and security. Injecting malicious JavaScript into Android applications has drawn an increased attention from the hacking community as its market share spikes. According to security researcher Jeremy S. from...

Feedly.com Cross Site Scripting

Feedly.com HTML Injection and XSS Vulnerability RSS feed ======================================================== Site: http://feedly.com Discovered by: Andrea Menin base64 @: bWVuaW4uYW5kcmVhQGdtYWlsLmNvbQ== Follow me: http://www.linkedin.com/in/andreamenin...