WordPress Plugin Vulnerabilities

RSS Includes Pages <= 3.6 - XSS

Description

The RSS Includes Pages WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
rss-includes-pages
Fixed in 3.7

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=1637856%40rss-includes-pages&old=1547668%40rss-includes-pages

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Original Researcher
Neven Biruski
Verified
No
WPVDB ID
8007e051-cf33-43bf-88a4-050f8aece3d5

Timeline

Publicly Published
2017-04-14 (about 9 years ago)
Added
2019-06-20 (about 6 years ago)
Last Updated
2019-06-20 (about 6 years ago)

Other

Published
Title
Published
2024-12-17
Title
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via Shortcode
Published
2022-05-09
Title
StaffList < 3.1.7 - Reflected Cross-Site Scripting
Published
2025-01-15
Title
Flexible PDF Coupons < 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-04-09
Title
Bold Page Builder < 4.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
Published
2023-01-11
Title
Breadcrumb < 1.5.33 - Contributor+ Stored XSS via Shortcode