CVE-2021-24656

The Simple Social Media Share Buttons WordPress plugin before 3.2.4 does not escape the Share Title settings before outputting it in the frontend pages or posts (depending on the settings used), allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:wpbrigade:simple_social_buttons:*:*:*:*:*:wordpress:*:*

Information

Published : 2021-10-11 04:15

Updated : 2021-10-15 09:29


NVD link : CVE-2021-24656

Mitre link : CVE-2021-24656


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

wpbrigade

  • simple_social_buttons