CVE-2024-0973

The CVE-2024-0973 entry relates to the Widget for Social Page Feeds WordPress plugin, prior to version 6.4. It is described as Stored XSS caused by insufficient sanitization/escaping of plugin settings, enabling high-privilege users (e.g., Administrators) to inject scripts even when unfiltered_ht...

CVE-2024-13207

The CVE-2024-13207 entry refers to the WordPress plugin Widget for Social Page Feeds (Facebook Pagelike Widget) prior to version 6.4.2. The issue is that the plugin does not adequately sanitize/escape certain settings, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltere...