Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 10:18 p.m.•14 views

CVE-2022-1717

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

4.8CVSS5.7AI score0.00588EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/20 11:15 a.m.•9 views

CVE-2022-1717

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00588EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/20 11:15 a.m.•13 views

CVE-2022-1717

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00588EPSS
SaveExploits1References1
CVE
CVE
•added 2022/06/20 10:25 a.m.•104 views

CVE-2022-1717

The CVE-2022-1717 entry affects the WordPress plugin “Custom Share Buttons with Floating Sidebar” (versions before 4.2). The root cause is inadequate sanitisation/escaping of certain settings, enabling Stored XSS when unfiltered_html is disallowed and high-privilege users (e.g., admins) could exp...

4.8CVSS4.7AI score0.00588EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/06/20 10:25 a.m.•35 views

CVE-2022-1717 Custom Share Buttons with Floating Sidebar < 4.2 - Admin+ Stored XSS

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

5AI score0.00588EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/20 12:00 a.m.•4 views

CVE-2022-1717: Improper Neutralization of Input During Web Page Generation

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed...

4.8CVSS5.7AI score0.00588EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/20 12:00 a.m.•14 views

WordPress plugin Custom Share Buttons with Floating Sidebar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Custom Share Buttons with Floating Sidebar plugin versions prior to 4.2 are vulnerable to a...

4.8CVSS5.3AI score0.00588EPSS
SaveExploits1References2
Rows per page
Query Builder