Flickrrss

CVEs (4)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-6467	WordPress Flickrrss	Hig	0.57	8.8	0.01	Feb 6, 2018	The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php.
CVE-2018-6469	WordPress Flickrrss	Med	0.40	6.1	0.01	Feb 6, 2018	A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_tags parameter to wp-admin/options-general.php.
CVE-2018-6468	WordPress Flickrrss	Med	0.40	6.1	0.01	Feb 6, 2018	A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_id parameter to wp-admin/options-general.php.
CVE-2018-6466	WordPress Flickrrss	Med	0.40	6.1	0.01	Feb 6, 2018	A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_set parameter to wp-admin/options-general.php.

CVE-2018-6467HigFeb 6, 2018
WordPress
Flickrrss
risk 0.57cvss 8.8epss 0.01
The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php.
CVE-2018-6469MedFeb 6, 2018
WordPress
Flickrrss
risk 0.40cvss 6.1epss 0.01
A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_tags parameter to wp-admin/options-general.php.
CVE-2018-6468MedFeb 6, 2018
WordPress
Flickrrss
risk 0.40cvss 6.1epss 0.01
A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_id parameter to wp-admin/options-general.php.
CVE-2018-6466MedFeb 6, 2018
WordPress
Flickrrss
risk 0.40cvss 6.1epss 0.01
A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_set parameter to wp-admin/options-general.php.