https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T16:55:03.872786+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-0189 CVE-2022-0189 — WP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS) 2026-10-20T16:55:03.873842+00:00

Affected: Unknown WP RSS Aggregator – News Feeds, Autoblogging, Youtube Video Feeds and More

The WP RSS Aggregator WordPress plugin before 4.20 does not sanitise and escape the id parameter in the wprss_fetch_items_row_action AJAX action before outputting it back in the response, leading to a Reflected Cross-Site Scripting