Advisories · Technology
smub Smash Balloon Social Post Feed – Simple Social Feeds for WordPress.
Every CVE that names smub Smash Balloon Social Post Feed – Simple Social Feeds for WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview
- smub Smash Balloon Social Post Feed – Simple Social Feeds for WordPress
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Smash Balloon Social Post Feed <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
- smub Smash Balloon Social Post Feed – Simple Social Feeds for WordPress
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Smash Balloon Custom Facebook Feed <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-color` Attribute
- smub Smash Balloon Social Post Feed – Simple Social Feeds for WordPress
- Cross-site scripting (XSS)