Hubbub Lite, 90f2b648bef4d9dd0be18b3f2650fcad20851cea

CVE, Research URL: 90f2b648bef4d9dd0be18b3f2650fcad20851cea
Home page URL: Security reports for Hubbub Lite
Application: Hubbub Lite
Published on: Jul 08, 2021
Research Description: Hubbub Lite – Fast, free social sharing and follow buttons [social-pug] < 1.19.0 Grow Social <= 1.18.2 - Reflected Cross-Site Scripting The Grow Social plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in versions up to, and including, 1.18.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 1.19.0.
Status: vulnerable