CVE-2014-4525

The CVE-2014-4525 entry describes a cross-site scripting (XSS) vulnerability in the magpie/scripts/magpie_slashbox.php file of the WP Ebay Feeds plugin for WordPress, affecting version 1.1 and earlier. The issue arises via the rss_url parameter, allowing remote attackers to inject arbitrary JavaS...

CVE-2023-23722

CVE-2023-23722 affects the WordPress WP eBay Product Feeds plugin up to version 3.3.1. The flaw is an admin+ Stored XSS due to insufficient sanitisation/escaping of settings, exploitable by high-privilege administrators (requires user interaction). PatchStack and WPVulnDB confirm a fix in version...