title: 10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)
description: The 10Web Social Photo Feed WordPress plugin before 1.4.29 was affected by a reflected Cross-Site Scripting (XSS) vulnerability in the wdi_apply_changes admin page, allowing an attacker to perform such attack against any logged in users
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: 10Web Social Photo Feed
vendor: Unknown
versions:
lessThan: 1.4.29, status: affected, version: 1.4.29, versionType: custom
}