QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24486

Published: Aug 23, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin before 3.2.3 did not escape the align and like_button_size parameters of its SSB shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.

Vendor	Product	Versions
Unknown	Simple Social Media Share Buttons – Social Sharing for Everyone	affected `3.2.3 - < 3.2.3`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/324e6b7b-a2ac-4c08-8b97-0967513f7328

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.