CVE-2017-18505

The CVE-2017-18505 relates to BestWebSoft’s Twitter button WordPress plugin (versions before 2.55). The issue is a Cross-Site Scripting (XSS) vulnerability arising from insufficient validation of client-side data in the web app, enabling an authenticated attacker to inject and execute JavaScript ...