Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the "t" GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fahad RSS Feed Widget 跨站脚本漏洞
Vulnerability Description
Fahad RSS Feed Widget是个人开发者的一个流行的Wordpress插件。 Fahad Mahmood RSS Feed Widget Plugin v2.7.9版本及之前版本存在安全漏洞，该漏洞源于在输入标签中回显之前不会清除GET参数的“t”值。这导致了一个反映出来的XSS漏洞，攻击者可以利用一个特别设计的URL来利用这个漏洞。
CVSS Information
N/A
Vulnerability Type
N/A