CVE-2026-5126
SourceCodester RSS Feed Parser file_get_contents server-side request forgery
A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affected by this issue is the function file_get_contents. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVSS 4.0 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products