TI-2024-00876 CVE-2024-0951 · GHSA-vf74-j427-jc3gAdvanced Social Feeds Widget & Shortcode <= 1.7 - Admin+ Stored XSSPriority LOW 22The Advanced Social Feeds Widget & Shortcode WordPress plugin through 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting att…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00379 · Published 2024-03-18 · No fix listed CWE-79
