Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS)
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.2%
exploitation probability
1.2%top 34% of all CVEs
observed exploitation
nono source reports it
The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.
Affected products
Unknown · Smash Balloon Social Post Feed