WP RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging, CVE-2022-0189

CVE, Research URL: CVE-2022-0189
Home page URL: Security reports for WP RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging
Application: WP RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging
Published on: Feb 28, 2022
Research Description: The WP RSS Aggregator WordPress plugin before 4.20 does not sanitise and escape the id parameter in the wprss_fetch_items_row_action AJAX action before outputting it back in the response, leading to a Reflected Cross-Site Scripting
Affected versions: max 4.20.
Status: vulnerable

WP RSS Aggregator &#8211; RSS Import, News Feeds, Feed to Post, and Autoblogging, CVE-2022-0189