Boletines de Vulnerabilidades

CVE-2025-49312

   
Software afectado WORDPRESS
 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRevolution Echo RSS Feed Post Generator Plugin for WordPress allows Reflected XSS. This issue affects Echo RSS Feed Post Generator Plugin for WordPress: from n/a through 5.4.8.1.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-49312