Blog2Social: Social Media Auto Post & Scheduler, CVE-2021-24956

CVE, Research URL: CVE-2021-24956
Home page URL: Security reports for Blog2Social: Social Media Auto Post & Scheduler
Application: Blog2Social: Social Media Auto Post & Scheduler
Published on: Dec 21, 2021
Research Description: The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue
Affected versions: Min -, max 6.8.7.
Status: vulnerable

Blog2Social: Social Media Auto Post &amp; Scheduler, CVE-2021-24956