Smashballoon Smash Balloon Social Post Feed
4 CVEs affecting Smashballoon Smash Balloon Social Post Feed. Latest disclosed: 2023-01-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24508 | Medium | 6.1 | 2021-09-13 | The Smash Balloon Social Post Feed WordPress plugin before 2.19.2 does not sanitise or escape the feedID POST parameter in its feed_locator AJAX action (availa… |
CVE-2022-4477 | Medium | 5.4 | 2023-01-16 | The Smash Balloon Social Post Feed WordPress plugin before 4.1.6 does not validate and escapes some of its shortcode attributes before outputting them back in… |
CVE-2021-25065 | Medium | 5.4 | 2022-01-17 | The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page. |
CVE-2021-24918 | Medium | 5.4 | 2021-11-29 | The Smash Balloon Social Post Feed WordPress plugin before 4.0.1 did not have any privilege or nonce validation before saving the plugin's setting. As a result… |