CVE-2021-25047

CVE-2021-25047: 10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)

Vendor Unknown
Product 10Web Social Photo Feed
Weakness CWE-79 · XSS
Published January 10, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulnerability in the wdi_apply_changes admin page, allowing an attacker to perform such attack against any logged in users

Key dates

02Disclosure timeline

January 10, 2022 CVE published
August 3, 2024 Record updated