CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

attackerkb•added 2021/12/21 9:15 a.m.•7 views

CVE-2021-24956

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS6.3AI score0.01439EPSS

SaveExploits2References3

OSV•added 2021/12/21 9:15 a.m.•12 views

CVE-2021-24956

6.1CVSS6.4AI score0.01439EPSS

SaveExploits2References1

Rapid7 Vulnerability Database (full)•added 2021/12/21 12:00 a.m.•2 views

CVE-2021-24956: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.8AI score0.01439EPSS

SaveExploits2References2

WPVulnDB•added 2021/11/22 12:00 a.m.•19 views

Blog2Social < 6.8.7 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue PoC https://example.com/wp-admin/admin.php?page=blog2social&b2sShowByDate;="...

6.1CVSS0.2AI score0.01439EPSS

SaveExploits2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by