CVE Database /
CVE-2022-4667
CVE · Medium
CVE-2022-4667 — RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 4.1.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-4667
|
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator [feedzy-rss-feeds] < 4.1.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 4.1.1
|
4.1.1 |
2023-01-04 |
—
|
CVE-2022-4667
The Feedzy RSS Aggregator plugin before version 4.1.1 contains a cross-site scripting flaw that permits attackers to inject malicious scripts into websites through the plugin. When visitors access an affected site, these injected scripts execute in their browsers, potentially delivering redirects, unwanted advertisements, or other harmful HTML content. The vulnerability was patched in version 4.1.1 and users should upgrade to this release or later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings