RF
Product
Rss Feed Widget
2
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add Rss Feed Widget to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-24314 | 6.1 | Aug 26 | Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag Affected: through 2.7.9 |
| CVE-2024-9836 | 5.9 | Nov 12 | The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is… Affected: before 3.0.0 |
Showing 2