Unrated severityNVD Advisory· Published Dec 30, 2010· Updated Jun 16, 2026

CVE-2010-4637

Description

Cross-site scripting (XSS) vulnerability in feedlist/handler_image.php in the FeedList plugin 2.61.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.

Affected products

Finalcut/Feedlist
cpe:2.3:a:finalcut:feedlist:2.61.01:*:*:*:*:*:*:*
WordPress/FeedListllm-create
Range: = 2.61.01

Patches

Vulnerability mechanics

References

osvdb.org/69071nvdExploit
www.johnleitch.net/Vulnerabilities/WordPress.Feed.List.2.61.01.Reflected.Cross-site.Scripting/56nvdExploit
secunia.com/advisories/42197nvdVendor Advisory
packetstormsecurity.org/1011-exploits/wpfeedlist-xss.txtnvd
exchange.xforce.ibmcloud.com/vulnerabilities/63055nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000