← Back

Wpematico Rss Feed Fetcher

wpematico_rss_feed_fetcher

Vendor: Etruel • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24793
1Etruel
1Wpematico Rss Feed Fetcher
Jun 17, 2026
Nov 1, 2021
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.6.12 does not escape the Feed URL added to a campaign before outputting it in an attribute, allowing high privilege users to perform Cross-Site Scripting attacks e...Show more
The WPeMatico RSS Feed Fetcher WordPress plugin before 2.6.12 does not escape the Feed URL added to a campaign before outputting it in an attribute, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.Show less