CVE-2021-24975: falha em NextScripts: Social Networks Auto-Poster
NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.3%
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue
Produtos afetados
Unknown · NextScripts: Social Networks Auto-PosterCVEs relacionadas — NextScripts: Social Networks Auto-Poster
No mesmo produto, das mais perigosas para as menos.
CVE-2021-25072—NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRFEPSS 0.5%CVE-2026-16570HIGHNextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth CallbackEPSS 0.3%CVE-2026-97227MEDIUMNextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated Social Account Credential Disclosure and Data DeletionEPSS 0.2%