QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24746

Published: Mar 28, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled (which is the default setting), leading to a Reflected Cross-Site Scripting issue.

Vendor	Product	Versions
Unknown	Social Sharing Plugin – Sassy Social Share	affected `3.3.40 - < 3.3.40`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/99f4fb32-e312-4059-adaf-f4cbaa92d4fa

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.