CVE-2023-0377

2023-03-0614:15:10

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

The Scriptless Social Sharing WordPress plugin before 3.2.2 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

CPENameOperatorVersion
scriptless-social-sharingeq3.2.0
scriptless-social-sharingeq1.2.2
scriptless-social-sharingeq1.1.0
scriptless-social-sharingeq1.0.0
scriptless-social-sharingeq2.3.0
scriptless-social-sharingeq1.5.1
scriptless-social-sharingeq1.5.0
scriptless-social-sharingeq1.5.2
scriptless-social-sharingeq3.1.4
scriptless-social-sharingeq2.2.2

Name	Operator	Version
scriptless-social-sharing	eq	3.2.0
scriptless-social-sharing	eq	1.2.2
scriptless-social-sharing	eq	1.1.0
scriptless-social-sharing	eq	1.0.0
scriptless-social-sharing	eq	2.3.0
scriptless-social-sharing	eq	1.5.1
scriptless-social-sharing	eq	1.5.0
scriptless-social-sharing	eq	1.5.2
scriptless-social-sharing	eq	3.1.4
scriptless-social-sharing	eq	2.2.2