Lucene search
HistoryJun 12, 2024 - 6:15 a.m.
CVE-2024-4924
social sharing plugin
wordpress
stored cross-site scripting
EPSS
0
Percentile
9.0%
The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Related
wpvulndb
wpvulndb
Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
2024-05-22 00:00:00
vulnrichment
vulnrichment
CVE-2024-4924 Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
2024-06-12 06:00:02
cvelist
cvelist
CVE-2024-4924 Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
2024-06-12 06:00:02
wpexploit
wpexploit
Sassy social share < 3.3.63 Admin+ Stored Cross-Site scripting
2024-05-22 00:00:00
cve
cve
CVE-2024-4924
2024-06-12 06:15:09
wordfence
wordfence