The Blog2Social plugin before 5.0.3 for WordPress allows XSS
Reporter | Title | Published | Views | Family All 8 |
---|---|---|---|---|
![]() | CVE-2019-9576 | 5 Mar 201921:29 | – | nvd |
![]() | WordPress Blog2Social plugin CVE-2019-9576 XSS | 7 Mar 201913:41 | – | cve0day |
![]() | Cross site scripting | 5 Mar 201921:29 | – | prion |
![]() | CVE-2019-9576 | 5 Mar 201921:00 | – | cvelist |
![]() | Blog2Social <= 5.0.2 - Authenticated Cross-Site Scripting (XSS) | 5 Feb 201900:00 | – | wpexploit |
![]() | WordPress Blog2Social plugin <= 5.0.2 - Authenticated Cross-Site Scripting (XSS) vulnerability | 12 Mar 201900:00 | – | patchstack |
![]() | WordPress Blog2Social Plugin < 5.0.3 XSS Vulnerability | 13 May 201900:00 | – | openvas |
![]() | Blog2Social <= 5.0.2 - Authenticated Cross-Site Scripting (XSS) | 5 Feb 201900:00 | – | wpvulndb |
Source | Link |
---|---|
security-consulting | www.security-consulting.icu/blog/2019/02/wordpress-blog2social-xss/ |
wordpress | www.wordpress.org/plugins/blog2social/ |
lists | www.lists.openwall.net/full-disclosure/2019/02/05/6 |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
page | query param | /wp-admin/admin.php | Authenticated Cross-Site Scripting (XSS) vulnerability in Blog2Social plugin for WordPress. | CWE-79 |
postId | query param | /wp-admin/admin.php | Authenticated Cross-Site Scripting (XSS) vulnerability in Blog2Social plugin for WordPress. | CWE-79 |
b2s_action | query param | /wp-admin/admin.php | Authenticated Cross-Site Scripting (XSS) vulnerability in Blog2Social plugin for WordPress. | CWE-79 |
b2s_update_publish_date | query param | /wp-admin/admin.php | Authenticated Cross-Site Scripting (XSS) vulnerability in Blog2Social plugin for WordPress. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo