Vulnerabilities and Security Researches

RSS Feed Widget, CVE-2024-9835

CVE, Research URL: CVE-2024-9835
Home page URL: Security reports for RSS Feed Widget
Application: RSS Feed Widget
Published on: Nov 12, 2024
Research Description: The RSS Feed Widget WordPress plugin before 3.0.1 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers
Affected versions: max 3.0.1.
Status: vulnerable