WD Instagram Feed Premium <= 1.3.0 - Cross-Site Scripting
mediumCross-site scripting (XSS) vulnerability in the Web-Dorado Instagram Feed WD plugin before 1.3.1 Premium for WordPress allows remote attackers to inject arbitrary web script or HTML by passing payloads in a comment on an Instagram post.
- CVSS:
- 6.1
- Affected:
- up to 1.3.0
- Fixed in:
- 1.3.1
- Disclosed:
- Apr 23, 2018