14 matches found
Blog2Social < 6.8.7 - Cross-Site Scripting
The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue. id: CVE-2021-24956 info: name: Blog2Social 6.8.7 - Cross-Site...
Blog2Social < 7.2.1 - Cross-Site Scripting
The Blog2Social WordPress plugin before 7.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin id: CVE-2023-3936 info: name: Blog2Social 7.2.1 - Cross-Site...
CVE-2023-40554
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blog2Social, Adenion Blog2Social: Social Media Auto Post & Scheduler plugin = 7.2.0 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blog2Social, Adenion Blog2Social: Social Media Auto Post & Scheduler plugin = 7.2.0 versions...
CVE-2023-40554 WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blog2Social, Adenion Blog2Social: Social Media Auto Post & Scheduler plugin = 7.2.0 versions...
CVE-2023-40554
Summary: CVE-2023-40554 affects the WordPress plugin Blog2Social: Social Media Auto Post & Scheduler (Adenion)
PT-2023-27507 · Unknown · Adenion Blog2Social
Name of the Vulnerable Software and Affected Versions: Adenion Blog2Social: Social Media Auto Post & Scheduler plugin versions = 7.2.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website,...
Missing Authorization Vulnerability in Blog2Social Plugin
On October 5, 2022, the Wordfence Threat Intelligence team responsibly disclosed a Missing Authorization vulnerability in Blog2Social, a WordPress plugin installed on over 70,000 sites that allows users to set up post sharing to various social networks. Vulnerable versions of the plugin make it...
WordPress Blog2Social Plugin < 5.9.0 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113569";...
CVE-2019-13572
The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...
CVE-2019-13572
The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...
Sql injection
The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...
CVE-2019-13572
The CVE concerns the WordPress Blog2Social plugin (Adenion) up to version 5.5.0. Root cause: improper sanitization of user-supplied input leads to a SQL injection vulnerability. Impact (per sources): remote attacker could manipulate SQL queries, potentially exposing sensitive data and modifying d...
CVE-2019-13572
The Adenion Blog2Social plugin through 5.5.0 for WordPress allows SQL Injection...