2 matches found
CVE-2024-1959: Improper Neutralization of Input During Web Page Generation
The Social Sharing Plugin – Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialWarfare' shortcode in all versions up to, and including, 4.4.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...
6.4CVSS6AI score0.0042EPSS
SaveExploits0References1
WordPress Social Warfare 3.5.2 Remote Code Execution
Author = Raed Ahsan Creation Date = 24/07/2021 Vulnerability : SocialWarfare 3.5.2 plugin wordpress Remote Code Execution Linkedin = https://linkedin.com/in/raed-ahsan/ import socket import requests import subprocess import time import pyautogui print"Start your python SimpleHTTPServer on port 12...
4.3CVSS7.2AI score0.72946EPSS
SaveExploits20
20