CVE-2021-25120
Assigner: WPScan
Published: 2022-04-18T17:10:26
State: PUBLISHED
affected: product: Easy Social Feed Pro
vendor: Unknown
versions: lessThan: 6.2.7
status: affected
version: 6.2.7
versionType: custom
product: Easy Social Feed – Social Photos Gallery – Post Feed – Like Box
vendor: Unknown
versions: lessThan: 6.2.7
status: affected
version: 6.2.7
versionType: custom
credits: value: Thura Moe Myint
descriptions: value: The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: EXTERNAL
title: Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting
x_generator: WPScan CVE Generator