CVE-2017-16758

MEDIUM 4.8CVE-2017-16758 · Published 09/11/2017 · updated 17/06/2026

In short

CVE-2017-16758 is a MEDIUM (CVSS 4.8) vulnerability affecting ultimate instagram feed (ultimate instagram feed project).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.9% of all vulnerabilities.
Fix: update to 1.3 or later.

Package	Affected versions	Patched versions
ultimate instagram feed ultimate_instagram_feed_project	`< 1.3`	`1.3`

Description

Cross-site scripting (XSS) vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "access_token" parameter.

References

packetstormsecurity.com/files/144921/WordPress-Ultimate-Instagram-Feed-1.2-Cross-Site-Scripting.html · Third Party Advisory
plugins.trac.wordpress.org/changeset/1758562/ultimate-instagram-feed · Exploit
wpvulndb.com/vulnerabilities/8947 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free