Medium severity6.1NVD Advisory· Published Sep 10, 2021· Updated Jun 17, 2026
CVE-2021-38352
CVE-2021-38352
Description
The Feedify – Web Push Notifications WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the feedify_msg parameter found in the ~/includes/base.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.1.8.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=2.1.8
- Feedify – Web Push Notifications/Feedify – Web Push Notificationsv5Range: 2.1.8
Patches
Vulnerability mechanics
References
2- plugins.trac.wordpress.org/browser/push-notification-by-feedify/tags/2.1.1/includes/base.phpnvdExploitThird Party Advisory
- www.wordfence.com/vulnerability-advisories/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.