Fl3r Feelbox Security Vulnerabilities and Issues — Fl3r Feelbox CVE List

Lucene search

Fl3r Feelbox ProjectFl3r Feelbox

2 matches found

CVE•added 2023/01/30 9:15 p.m.•48 views

CVE-2022-4552

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

6.1CVSS5.9AI score0.00119EPSS

CVE•added 2023/01/30 9:15 p.m.•46 views

CVE-2022-4553

The FL3R FeelBox WordPress plugin through 8.1 does not have CSRF check when updating reseting moods which could allow attackers to make logged in admins perform such action via a CSRF attack and delete the lydl_posts & lydl_poststimestamp DB tables

4.3CVSS4.5AI score0.00086EPSS