Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-2470

Add to Feedly <= 1.2.11 - Admin+ Stored XSS

Description

The Add to Feedly WordPress plugin through 1.2.11 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Add to Feedly

Default version status: affected

  • 0 to ≤ 1.2.11affected

References