Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: rebelcode Component: Spotlight Social Feeds Clear all filters
TI-2023-00363 CVE-2023-0379 · GHSA-77h4-2fq7-7c25

Spotlight Social Feeds < 1.4.3 - Contributor+ Stored XSS

Priority MEDIUM 58

The Spotlight Social Feeds WordPress plugin before 1.4.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contri…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00526 Published 2023-02-13 Fixed in 1.4.3