10web 10web Social Post Feed
2 CVEs affecting 10web 10web Social Post Feed. Latest disclosed: 2024-10-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-9607 | Medium | 6.1 | 2024-10-25 | The 10Web Social Post Feed plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on… |
CVE-2023-2503 | Medium | 6.1 | 2023-06-05 | The 10Web Social Post Feed WordPress plugin before 1.2.9 does not sanitise and escape some parameter before outputting it back in a page, leading to a Reflecte… |