Vulnerabilities (CVE)

Filtered by vendor 10web Subscribe
Filtered by product 10websocial
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25047 1 10web 1 10websocial 2023-12-10 4.3 MEDIUM 6.1 MEDIUM
The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulnerability in the wdi_apply_changes admin page, allowing an attacker to perform such attack against any logged in users