Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-67562
HistoryOct 13, 2021 - 12:00 a.m.

WordPress Simple Social Media Share Buttons plugin cross-site scripting vulnerability

2021-10-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
wordpress
cross-site scripting
social media share buttons
php
mysql
vulnerability
javascript code

EPSS

0.001

Percentile

24.8%

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of WordPress Simple Social Media Share Buttons plugin prior to 3.2.4, which stems from the product’s failure to properly filter input data when outputting shared title settings to the frontend. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%