CVE-2024-13615

The Social Snap WordPress plugin (Social Share Buttons, Social Sharing Icons, Click to Tweet) versions 1.3.6 and earlier is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain settings, allowing high-privilege users like administ...

CVE-2023-1523

Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits. Graphical terminal emulators like xterm, gnome-terminal and others...