cleantalk
Vulnerabilities and Security Researches

10WebSocial, CVE-2018-10300

CVE, Research URL

CVE-2018-10300

Application

10WebSocial

Published on
Apr 23, 2018
Research Description
Cross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in an Instagram profile's bio.
Affected versions
max 1.3.1.
Status
vulnerable