CVE-2026-5126

SourceCodester RSS Feed Parser file_get_contents server-side request forgery

CVSS 5.3 MEDIUMEPSS 0.3%CWE-918

A flaw has been found in SourceCodester RSS Feed Parser 1.0. Affected by this issue is the function file_get_contents. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

SourceCodester · RSS Feed Parser

public PoCs found — 1

cve_referencemedium.com/@hemantrajbhati5555/discovering-a-blind-ssrf-vulnerability-in-a-php-rss-feed-parser-243f3ccbdafbunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://medium.com/@hemantrajbhati5555/discovering-a-blind-ssrf-vulnerability-in-a-php-rss-feed-parser-243f3ccbdafb https://vuldb.com/submit/780180 https://vuldb.com/vuln/354158 https://vuldb.com/vuln/354158/cti https://www.sourcecodester.com/