cleantalk
Vulnerabilities and Security Researches

Smash Balloon Social Photo Feed – Best Social Feed Plugin for WordPress, e766e165-1a05-4065-9e71-27b528641dd2

Published on
-
Research Description
Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 2.9.2 Multiple Plugins from Smash Balloon - Reflected Cross-Site Scripting The plugins do not properly sanitise the URL generated to dismiss the New Users notifications, leading to a reflected Cross-Site Scripting issue
Affected versions
max 2.9.2.
Status
vulnerable