PT-2018-17564

Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description The issue concerns a CSRF problem. It affects the "wp-admin/options-general.php" API endpoint. Recommendations For flickrRSS plugin version 5.3.1, consider restricting access to the...

PT-2018-17566

Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the flickrRSS tags parameter to "wp-admin/options-general.php". Recommendations For version 5.3.1, avoid...