8 matches found
CVE-2026-109702
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affects Social Share Buttons: from n/a through 1.31...
EUVD-2026-102046
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affects Social Share Buttons: from n/a through 1.31...
CVE-2026-109702
The maxfoundry Social Share Buttons WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions n/a through 1.31 . The root cause is the Improper Neutralization of Input During Web Page Generation , specifically within the share-button component. This vulnerability allows an a...
CVE-2025-39444: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in maxfoundry MaxButtons maxbuttons allows Stored XSS.This issue affects MaxButtons: from n/a through = 9.8.3...
CVE-2025-28933
CVE-2025-28933 relates to the WordPress MaxA/B plugin (
PT-2025-10963
Name of the Vulnerable Software and Affected Versions: maxfoundry MaxA/B versions n/a through 2.2.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For maxfoundry MaxA/B versions n/a through 2.2.2, update to a version that fixes...
CVE-2025-28933: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in maxfoundry MaxA/B maxab allows Stored XSS.This issue affects MaxA/B: from n/a through = 2.2.2...