CVE-2024-13874

The Feedify - Web Push Notifications WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in versions prior to 2.4.6 . The root cause is the failure to properly sanitize and escape a parameter before outputting it back to the page. An attacker could exploit this to target high-p...

CVE-2021-38352

The CVE-2021-38352 entry concerns the WordPress plugin Feedify – Web Push Notifications . The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw triggered via the feedify_msg parameter in the file includes/base.php , affecting versions up to and including 2.1.8 . Successful exploitation...