Lucene search
+L

4 matches found

Circl
Circl
added 2021/10/22 12:37 a.m.9 views

CVE-2021-39321

creationtimestamp| type| source ---|---|--- 2021-10-22 00:37:16+00:00| seen| https://t.me/cibsecurity/30985...

8.8CVSS8.1AI score0.02041EPSS
SaveExploits2References1
NVD
NVD
added 2021/10/21 8:15 p.m.16 views

CVE-2021-39321

Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wpajaxheateorsssimportconfig AJAX action due to deserialization of unvalidated user supplied inputs via the importconfig function found in the /admin/class-sassy-social-share-admin.php file. Th...

8.8CVSS0.02041EPSS
SaveExploits2References3
CVE
CVE
added 2021/10/21 7:38 p.m.69 views

CVE-2021-39321

CVE-2021-39321 affects the WordPress plugin Sassy Social Share (version 3.3.23). It enables PHP Object Injection via the wp_ajax_heateor_sss_import_config AJAX action due to deserialization of unvalidated inputs in admin/class-sassy-social-share-admin.php import_config, without proper capability ...

8.8CVSS8.7AI score0.02041EPSS
SaveExploits2References3Affected Software1
Vulnrichment
Vulnrichment
added 2021/10/21 7:38 p.m.15 views

CVE-2021-39321 Sassy Social Share 3.3.23 PHP Object Injection

Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wpajaxheateorsssimportconfig AJAX action due to deserialization of unvalidated user supplied inputs via the importconfig function found in the /admin/class-sassy-social-share-admin.php file. Th...

8.8CVSS8.7AI score0.02041EPSS
SaveExploits2References3
Rows per page
Query Builder