CVE-2022-1717 Custom Share Buttons with Floating Sidebar < 4.2 - Admin+ Stored XSS

2022-06-2010:25:57

CWE-79

WPScan

www.cve.org

custom share buttons

floating sidebar

wordpress plugin

stored xss

cross-site scripting

unfiltered html

high privilege users

admin

EPSS

0.001

Percentile

24.8%

JSON

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed

CNA Affected

[
  {
    "product": "Custom Share Buttons with Floating Sidebar",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.2",
        "status": "affected",
        "version": "4.2",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/79a532e9-bc6e-4722-8d67-9c15720d06a6

EPSS

0.001

Percentile

24.8%

JSON

Related for CVELIST:CVE-2022-1717