CVE-2021-25120

MEDIUM

6.1

Description

The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues

CVE Details

CVSS v3.1 Score6.1

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published4/18/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

easysocialfeed:easy_social_feed

Weaknesses (CWE)

CWE-79

References

https://wpscan.com/vulnerability/0ad020b5-0d16-4521-8ea7-39cd206ab9f6(contact@wpscan.com)

https://wpscan.com/vulnerability/0ad020b5-0d16-4521-8ea7-39cd206ab9f6(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.