CVE-2022-2383

CVE-2022-2383: Feed Them Social < 3.0.1 - Reflected Cross-Site Scripting

Vendor Unknown

Product Feed Them Social – for Twitter feed, Youtube and more

Weakness CWE-79 · XSS

Published August 22, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Key dates

02Disclosure timeline

August 22, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2383 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-14063 SEO Links Interlinking <= 1.7.9.9.1 - Reflected Cross-Site Scripting via 'google_error' Parameter CVE-2026-5362 Pimcore Platform v12.3.3 - Stored XSS in Document Editable Embed rendering CVE-2026-25500 Rack's Stored XSS in Rack::Directory via javascript: filenames rendered into anchor href CVE-2025-59556 WordPress GoStore theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-59989 Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection