CVE-2024-2836medium

CVE-2024-2836: medium-severity vulnerability in Social Share, Social Login and Social Comments…

Super Socializer < 7.13.64 - Editor+ Stored XSS

Published · Updated

Follow this CVE+ Monitor Social Share, Social Login and Social Comments Plugin

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.8epss 0.5%
The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.64 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Affected products
Unknown · Social Share, Social Login and Social Comments Plugin
Related CVEs — Social Share, Social Login and Social Comments…

In the same product, most dangerous first.

CVE-2023-2779MEDIUMSuper Socializer < 7.13.52 - Reflected XSSEPSS 6.0%CVE-2022-4484MEDIUMSuper Socializer < 7.13.44 - Contributor+ Stored XSSEPSS 0.5%