PT-2023-19744 · WordPress · Add To Feedly Wordpress Plugin

Fioravante Souza · Published 2023-05-30 · Updated 2025-01-10 · CVE-2023-2470

Positive Technologies · (AI Summary)

CVSS v3.1

4.8

Medium

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Add to Feedly WordPress plugin versions 1.2.11 and earlier

Description The issue allows high-privilege users, such as admins, to perform Cross-Site Scripting attacks. This is possible because the plugin does not properly sanitize and escape its settings, even when the unfiltered html capability is disallowed.

Recommendations For Add to Feedly WordPress plugin versions 1.2.11 and earlier, update to a version that properly sanitizes and escapes its settings to prevent Cross-Site Scripting attacks.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-2470

Affected Products

Add To Feedly Wordpress Plugin

References · 5

• 🔥 https://wpscan.com/vulnerability/de0adf26-8a0b-4b90-96d5-4bec6e770e04 · Exploit
• https://osv.dev/vulnerability/CVE-2023-2470 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2470 · Security Note
• https://t.me/cvenotify/51355 · Telegram Post
• https://t.me/cvenotify/107083 · Telegram Post