Lucene search
+L

7 matches found

Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•48 views

Sassy Social Share <= 3.3.3 - Cross-Site Scripting

The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateorssssharingcount' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS6AI score0.17313EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2024/10/16 7:15 a.m.•26 views

CVE-2022-4971

The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateorssssharingcount' AJAX action in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS6AI score0.17313EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/10/16 12:00 a.m.•24 views

WordPress plugin Sassy Social Share has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS5.5AI score0.17313EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•25 views

PT-2024-11908

Name of the Vulnerable Software and Affected Versions Sassy Social Share plugin for WordPress versions up to, and including, 3.3.3 Description The issue is related to Reflected Cross-Site Scripting via the urls parameter called via the heateor sss sharing count AJAX action due to insufficient inp...

6.1CVSS6.1AI score0.17313EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2022/04/11 3:15 p.m.•15 views

CVE-2021-24987

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.30 does not sanitise and escape the urls parameter in its thechampsharingcount AJAX action available to both unauthenticated and authenticated users before outputting it back in the response, leading to a...

6.1CVSS6.3AI score0.01938EPSS
SaveExploits2References3
osv_cve
osv_cve
•added 2022/04/11 3:15 p.m.•26 views

CVE-2021-24987

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.30 does not sanitise and escape the urls parameter in its thechampsharingcount AJAX action available to both unauthenticated and authenticated users before outputting it back in the response, leading to a...

6.1CVSS6.4AI score0.01938EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2022/04/11 12:00 a.m.•8 views

PT-2022-9549

Name of the Vulnerable Software and Affected Versions The Social Share, Social Login and Social Comments Plugin WordPress plugin versions prior to 7.13.30 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the urls parameter in the the champ sharing...

6.1CVSS5.8AI score0.01938EPSS
SaveExploits2References4
Rows per page
Query Builder