Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Duc Bui Quang WP Default Feature Image plugin <= 1.0.1.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Duc Bui Quang | WP Default Feature Image | ≤ 1.0.1.1 | — |
Medium · 5.9
CVE-2023-25488
EUVD-2023-29443GHSA-f58g-rgmc-vrg3
WordPress WP Default Feature Image Plugin <= 1.0.1.1 is vulnerable to Cross Site Scripting (XSS)
Published Sep 1, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack