Vulnerabilities and Security Researches

10WebSocial, CVE-2018-10301

CVE, Research URL: CVE-2018-10301
Home page URL: Security reports for 10WebSocial
Application: 10WebSocial
Published on: Apr 23, 2018
Research Description: Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post.
Affected versions: Min -, max 1.4.19.
Status: vulnerable