Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:smashballoon:social_post_feed:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

Stored Cross-Site Scripting and RCE in Smash Balloon Social Post Feed

The Smash Balloon Social Post Feed WordPress plugin is vulnerable to Stored XSS that can be escalated to arbitrary plugin installation and remote code execution.

Social Post Feed – Simple Social Feeds for WordPress wordpress xss rce web-application-vulnerability
1r 2t 1c