medium5.4
CVE-2021-25065
The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.
Impact
The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smashballoon | Smash Balloon Social Post Feed | before 4.1.1 |