Rss Feed Widget Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Rss Feed Widget Project records in CISA KEV

No Rss Feed Widget Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rss Feed Widget 2 records MEDIUM

Records

2 records in Rss Feed Widget · all components

TI-2024-09128 CVE-2024-9836 · GHSA-434f-v35r-xr4j

RSS Feed Widget < 3.0.0 - Contributor+ Stored XSS

MEDIUM 60

The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00329 Published 2024-11-12 Fixed in 3.0.0 CWE-79

TI-2020-14875 CVE-2020-24314 · GHSA-h6fh-q389-hh77

Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the…

LOW 29

Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00866 Published 2020-08-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0