Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting
18Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 2.2%
probabilidad de explotación
2.2%top 19% de las CVE
explotación observada
noninguna fuente lo reporta
The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled (which is the default setting), leading to a Reflected Cross-Site Scripting issue.
Productos afectados
Unknown · Social Sharing Plugin – Sassy Social Share