VYPR

Ultimate Instagram Feed

by WordPress

CVEs (1)

  • CVE-2017-16758MedNov 9, 2017
    risk 0.24cvss 4.8epss 0.01

    Cross-site scripting (XSS) vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "access_token" parameter.