CVE-2018-6469: Flickrrss Project Flickrrss

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSS_tags parameter to wp-admin/options-general.php.

Affected products

• Flickrrss Project Flickrrss: version 5.3.1 only

Published 2018-02-06. Last modified 2026-06-17.