CVE-2022-2383: 
WordPress vulnerability analysis and mitigation

The Feed Them Social WordPress plugin (versions before 3.0.1) was identified with a Reflected Cross-Site Scripting vulnerability, assigned CVE-2022-2383. The vulnerability was discovered and reported on July 11, 2022, and publicly disclosed on July 26, 2022. This security issue affects the plugin's parameter handling functionality (WPScan).

The vulnerability stems from improper sanitization and escaping of parameters before they are output back to the page. The issue has been assigned a CVSS score of 6.1 (medium severity) and is classified under CWE-79. The vulnerability falls under the OWASP Top 10 category A7: Cross-Site Scripting (XSS) (WPScan).

The vulnerability affects both authenticated and unauthenticated users, potentially allowing attackers to execute malicious scripts in users' browsers through the plugin's parameter handling functionality (WPScan).

Proof of concept exploits have been documented using two specific endpoints: the fts_refresh_token_ajax action with access_token parameter and the same action with feed=instagram&expires_in parameter, both accessible through the wp-admin/admin-ajax.php path (WPScan).

The vulnerability has been patched in version 3.0.1 of the Feed Them Social plugin. Users are advised to update to this version or later to mitigate the security risk (WPScan).