CVE-2021-24987

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.30 does not sanitise and escape the urls parameter in its thechampsharingcount AJAX action available to both unauthenticated and authenticated users before outputting it back in the response, leading to a...

PT-2022-9549

Name of the Vulnerable Software and Affected Versions The Social Share, Social Login and Social Comments Plugin WordPress plugin versions prior to 7.13.30 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the urls parameter in the the champ sharing...