cleantalk
Vulnerabilities and Security Researches

Flow-Flow Social Feed Stream, 8354b34e-40f4-4b70-bb09-38e2cf572ce9

Published on
-
Research Description
Flow-Flow Social Feed Stream [flow-flow-social-streams] < 3.0.72 (closed) Flow-Flow Social Stream &lt;= 3.0.71 - Unauthenticated Cross-Site Scripting (XSS) Cross-Site Scripting (XSS) vulnerability in the JSON output by modifying the hash parameter in admin-ajax.php using the fetch_posts action. Response Content-Type set to html.
Affected versions
max 3.0.72.
Status
vulnerable