← All advisories

Medium severity5.4NVD Advisory· Published Jan 17, 2022· Updated Jun 17, 2026

CVE-2021-25065

CVE-2021-25065

Description

The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Custom Facebook Feedinferred
Range: <4.1.1
Package: https://wordpress.org/plugins/custom-facebook-feed
WordPress/Smash Balloon Social Post Feedllm-fuzzy
Range: <4.1.1
Package: https://wordpress.org/plugins/smash-balloon-social-post-feed

Patches

Vulnerability mechanics

References

1

wpscan.com/vulnerability/ae1aab4e-b00a-458b-a176-85761655bdccnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.