RSS Feed Widget

DATE	CVE	VULNERABILITY TITLE	RISK
2024-10-18	CVE-2024-10057	Cross-site Scripting vulnerability in Fahadmahmood RSS Feed Widget The RSS Feed Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rfw-youtube-videos shortcode in all versions up to, and including, 2.9.9 due to insufficient input sanitization and output escaping on user supplied attributes. network low complexity fahadmahmood CWE-79	5.4