Threats tagged 'ghsa-87v3-2c87-jjqc'

A vulnerability in rachelos WeRSS we-mp-rss up to version 1.4.7 allows remote attackers to perform server-side request forgery (SSRF) via manipulation of the web_hook_url argument in the do_job function of the Webhook Module. The flaw is publicly known and has a CVSS score of 6.3, indicating a medium severity level.