Description
The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulnerability in the wdi_apply_changes admin page, allowing an attacker to perform such attack against any logged in users
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | 10Web Social Photo Feed | 1.4.29 – < 1.4.29 | 1.4.29 |