← Vulnerability feed

Vulnerability record · CVE-2022-2383 · published 22 August 2022

CVE-2022-2383: Slickremix feed them social cross-site scripting vulnerability

Slickremix · Feed Them Social

The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

6.1 CVSS 3.1 Medium EPSS 6.5% · top 6.5% CWE-79 · Cross-site scripting
6.1CVSS 3.1 base score
6.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://wpscan.com/vulnerability/4a3b3023-e740-411c-a77c-6477b80d7531 ExploitThird Party Advisory
https://wpscan.com/vulnerability/4a3b3023-e740-411c-a77c-6477b80d7531 ExploitThird Party Advisory

Track CVE-2022-2383 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-2437Slickremix feed them social deserialization of untrusted data vulnerabilityThe Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untrusted input via the 'fts_url' …EPSS 1.7%9.8CVE-2015-9351Slickremix feed them social improper input validation vulnerabilityThe feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.EPSS 2.8%8.8CVE-2023-25056Slickremix feed them social cross-site request forgery vulnerabilityCross-Site Request Forgery (CSRF) vulnerability in SlickRemix Feed Them Social plugin <= 3.0.2 versions.EPSS 0.26%6.1CVE-2022-2532Slickremix feed them social cross-site scripting vulnerabilityThe Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Refle…EPSS 0.77%6.1CVE-2015-9350Slickremix feed them social cross-site scripting vulnerabilityThe feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.EPSS 0.91%4.3CVE-2020-36739Slickremix feed them social cross-site request forgery vulnerabilityThe Feed Them Social – Page, Post, Video, and Photo Galleries plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and…EPSS 0.48%6.1CVE-2026-42897Microsoft Exchange Server XSS enables spoofingMicrosoft Exchange Server and Exchange Server Subscription Edition fail to neutralize input during web page generation, a cross-site scripting flaw (…KEVEPSS 0.52%analysed6.1CVE-2025-48700Zimbra Classic UI stored XSS via crafted email HTMLZimbra Collaboration Suite Classic UI fails to properly sanitize HTML content in email messages, allowing crafted tag structures and attribute values…KEVEPSS 1.7%analysed

Source: NIST National Vulnerability Database (record CVE-2022-2383), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.