Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-22660 EUVD-2025-8466GHSA-554v-gm73-8gvq

WordPress Include Mastodon Feed plugin <= 1.9.9 - Cross Site Scripting (XSS) vulnerability

Published Mar 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wolfgang Include Mastodon Feed include-mastodon-feed allows DOM-Based XSS.This issue affects Include Mastodon Feed: from n/a through <= 1.9.9.

Affected products

VendorProductAffectedFixed
Wolfgang Include Mastodon Feed ≤ 1.9.9 —

References