Smash Balloon Social Post Feed vulnerabilities | LiveThreat CVE Feed

Product

Smash Balloon Social Post Feed

by · last CVE Jan 16, 2023

CVEs

On KEV

5.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Smash Balloon Social Post Feed to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-4477	5.4	1%	Jan 16	Smash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSS Affected: before 4.1.6
CVE-2021-25065	5.4	1%	Jan 17	Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS) Affected: 4.1.1 before 4.1.1
CVE-2021-24918	5.4	1%	Nov 29	Smash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSS Affected: 4.0.1 before 4.0.1