CVE-2024-9702

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialrocket-floating' shortcode in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2024-9702

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialrocket-floating' shortcode in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2024-9702

CVE-2024-9702 : The Social Rocket – Social Sharing Plugin for WordPress is vulnerable to a Stored Cross-Site Scripting (Stored XSS) via the plugin’s shortcodes, specifically the socialrocket-floating shortcode, in all versions up to and including 1.3.4. The vulnerability arises from insufficient ...