### [CVE-2021-25055](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25055)
![](https://img.shields.io/static/v1?label=Product&message=FeedWordPress&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2022.0123%3C%202022.0123%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-site%20Scripting%20(XSS)&color=brighgreen)

### Description

The FeedWordPress plugin before 2022.0123 is affected by a Reflected Cross-Site Scripting (XSS) within the "visibility" parameter.

### POC

#### Reference
- https://wpscan.com/vulnerability/7ed050a4-27eb-4ecb-9182-1d8fa1e71571

#### Github
- https://github.com/ARPSyndicate/kenzer-templates