Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-9835

RSS Feed Widget < 3.0.1 - Reflected XSS

The RSS Feed Widget WordPress plugin before 3.0.1 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Androidbubble Fahadmahmood
Products
Rss Feed Widget Rss Feed Widget
CVE-2024-9836

RSS Feed Widget < 3.0.0 - Contributor+ Stored XSS

The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Androidbubble Rss Feed Widget Project
Products
Rss Feed Widget Rss Feed Widget