Lucene search
K

14 matches found

Nuclei
Nuclei
added yesterday33 views

Blog2Social < 6.8.7 - Cross-Site Scripting

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue. id: CVE-2021-24956 info: name: Blog2Social 6.8.7 - Cross-Site...

6.1CVSS6.3AI score0.01515EPSS
Exploits2References2
Nuclei
Nuclei
added 2 days ago19 views

Blog2Social < 7.2.1 - Cross-Site Scripting

The Blog2Social WordPress plugin before 7.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin id: CVE-2023-3936 info: name: Blog2Social 7.2.1 - Cross-Site...

6.1CVSS6.3AI score0.16021EPSS
Exploits2References2
NVD
NVD
added 2023/09/06 9:15 a.m.16 views

CVE-2023-40554

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blog2Social, Adenion Blog2Social: Social Media Auto Post & Scheduler plugin = 7.2.0 versions...

7.1CVSS6.2AI score0.00166EPSS
Exploits0References1
Prion
Prion
added 2023/09/06 9:15 a.m.24 views

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blog2Social, Adenion Blog2Social: Social Media Auto Post & Scheduler plugin = 7.2.0 versions...

5.8CVSS6AI score0.00166EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/06 8:14 a.m.11 views

CVE-2023-40554 WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blog2Social, Adenion Blog2Social: Social Media Auto Post & Scheduler plugin = 7.2.0 versions...

7.1CVSS6.3AI score0.00166EPSS
Exploits0References1
CVE
CVE
added 2023/09/06 8:14 a.m.43 views

CVE-2023-40554

Summary: CVE-2023-40554 affects the WordPress plugin Blog2Social: Social Media Auto Post & Scheduler (Adenion)

7.1CVSS6AI score0.00166EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/06 12:0 a.m.2 views

PT-2023-27507 · Unknown · Adenion Blog2Social

Name of the Vulnerable Software and Affected Versions: Adenion Blog2Social: Social Media Auto Post & Scheduler plugin versions = 7.2.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...

7.1CVSS6.1AI score0.00166EPSS
Exploits0References6
Wordfence Blog
Wordfence Blog
added 2022/11/08 5:5 p.m.32 views

Missing Authorization Vulnerability in Blog2Social Plugin

On October 5, 2022, the Wordfence Threat Intelligence team responsibly disclosed a Missing Authorization vulnerability in Blog2Social, a WordPress plugin installed on over 70,000 sites that allows users to set up post sharing to various social networks. Vulnerable versions of the plugin make it...

4.8AI score0.00141EPSS
Exploits2
OpenVAS
OpenVAS
added 2019/11/15 12:0 a.m.27 views

WordPress Blog2Social Plugin < 5.9.0 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113569";...

6.1CVSS6.3AI score0.00332EPSS
Exploits0References4
NVD
NVD
added 2019/08/01 3:15 p.m.9 views

CVE-2019-13572

The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...

9.8CVSS9.8AI score0.0064EPSS
Exploits0References3
OSV
OSV
added 2019/08/01 3:15 p.m.0 views

CVE-2019-13572

The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...

9.8CVSS5.8AI score
Exploits0References3
Prion
Prion
added 2019/08/01 3:15 p.m.13 views

Sql injection

The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...

7.5CVSS9.7AI score0.0064EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2019/08/01 2:35 p.m.62 views

CVE-2019-13572

The CVE concerns the WordPress Blog2Social plugin (Adenion) up to version 5.5.0. Root cause: improper sanitization of user-supplied input leads to a SQL injection vulnerability. Impact (per sources): remote attacker could manipulate SQL queries, potentially exposing sensitive data and modifying d...

9.8CVSS9.7AI score0.0064EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2019/08/01 2:35 p.m.13 views

CVE-2019-13572

The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...

9.8AI score0.0064EPSS
Exploits0References3
Rows per page
Query Builder