CVE-2021-25065: falha em Smash Balloon Social Post Feed
Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS)
Publicada em · Atualizada em
18Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 1.0%
probabilidade de exploração
1.0%top 37% das CVEs
exploração observada
nãonenhuma fonte reporta
The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.
Produtos afetados
Unknown · Smash Balloon Social Post FeedCVEs relacionadas — Smash Balloon Social Post Feed
No mesmo produto, das mais perigosas para as menos.
CVE-2021-24508—Smash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSSEPSS 1.3%CVE-2021-24918—Smash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSSEPSS 0.7%CVE-2022-4477MEDIUMSmash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSSEPSS 0.5%