Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24746

Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled (which is the default setting), leading to a Reflected Cross-Site Scripting issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Social Sharing Plugin – Sassy Social Share

  • 3.3.40 to < 3.3.40affected

References