Unrated severityNVD Advisory· Published Apr 18, 2022· Updated Aug 3, 2024

Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting

CVE-2021-25120

Description

The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Easy Social Feed plugindescription
Easysocialfeed/Easy Social Feedllm-fuzzy
Range: <6.2.7

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/0ad020b5-0d16-4521-8ea7-39cd206ab9f6mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000