Unauthenticated Cross Site Scripting (XSS) in Product Feed Manager <= 7.6.1 versions.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RexTheme Product Feed Manager.This issue affects Product Feed Manager: from n/a through 7.3.15.