Easy Social Icons Security Vulnerabilities and Issues — Easy Social Icons CVE List

Lucene search

CybernetikzEasy Social Icons

2 matches found

CVE•added 2022/04/04 4:15 p.m.•71 views

CVE-2022-0887

The Easy Social Icons WordPress plugin before 3.1.4 does not sanitize the selected_icons attribute to the cnss_widget before using it in an SQL statement, leading to a SQL injection vulnerability.

7.2CVSS7.2AI score0.00538EPSS

CVE•added 2022/04/11 3:15 p.m.•69 views

CVE-2022-0840

The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the image_file field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfiltered_html capability is disallowed.

4.8CVSS4.8AI score0.00195EPSS