title: WordPress Social Feed | All social media in one place Plugin <= 1.5.4.6 is vulnerable to Cross Site Scripting (XSS)
description: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Social Feed | All social media in one place plugin <= 1.5.4.6 versions.
problem types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: add-facebook
product: Social Feed | All social media in one place
vendor: Web-Settler
versions:
lessThanOrEqual: 1.5.4.6, status: affected, version: n/a, versionType: custom
}