Easy Social Feed Security Vulnerabilities and Issues — Easy Social Feed CVE List

Lucene search

EasysocialfeedEasy Social Feed

3 matches found

CVE•added 2022/04/18 6:15 p.m.•87 views

CVE-2021-25120

The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues

6.1CVSS6.1AI score0.31019EPSS

CVE•added 2024/03/27 12:15 p.m.•50 views

CVE-2024-30180

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Easy Social Feed allows Stored XSS.This issue affects Easy Social Feed: from n/a through 6.5.3.

6.5CVSS6.7AI score0.00145EPSS

CVE•added 2024/03/21 2:51 a.m.•31 views

CVE-2024-1278

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'efb_likebox' shortcode in all versions up to, and including, 6.5.4 due to insufficient input sanitization and output escaping on user supplied attr...

6.4CVSS6AI score0.00134EPSS