Vulnerabilities and security researches forfloating-social-bar floating-social-bar

Jun 07, 2024

CVE, Research URL: CVE-2015-5528
Home page URL: Security reports for Floating Social Bar
Application: Floating Social Bar
Date: Jul 16, 2015
Research Description: Cross-site scripting (XSS) vulnerability in the save_order function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the items[] parameter in an fsb_save_order action to wp-admin/admin-ajax.php.
Affected versions: max 1.1.7.
Status: vulnerable

CVE, Research URL: CVE-2015-3299
Home page URL: Security reports for Floating Social Bar
Application: Floating Social Bar
Date: Sep 19, 2017
Research Description: Cross-site scripting (XSS) vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to original service order.
Affected versions: max 1.1.7.
Status: vulnerable

Apr 26, 2025

CVE, Research URL: CVE-2025-46451
Home page URL: Security reports for Floating Social Bar
Application: Floating Social Bar
Date: Apr 24, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi Floating Social Bar allows Stored XSS. This issue affects Floating Social Bar: from n/a through 1.1.7.
Affected versions: max 1.1.7.
Status: vulnerable