cleantalk
Vulnerabilities and Security Researches

Social Sharing Plugin – Sassy Social Share, CVE-2024-2159

CVE, Research URL

CVE-2024-2159

Published on
Apr 26, 2024
Research Description
The Social Sharing Plugin WordPress plugin before 3.3.61 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Affected versions
Min -, max 3.3.61.
Status
vulnerable