2 matches found
CVE-2026-19719
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...
6.8CVSS0.0029EPSS
SaveExploits0References1
EUVD-2026-69833
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...
6.8CVSS5.8AI score0.0029EPSS
SaveExploits0References1
20