Lucene search

K
wpvulndbRyan DewhurstWPVDB-ID:E5BCD333-3B62-4FBD-A45E-BB9E515AC880
HistoryFeb 05, 2019 - 12:00 a.m.

Blog2Social <= 5.0.2 - Authenticated Cross-Site Scripting (XSS)

2019-02-0500:00:00
Ryan Dewhurst
wpscan.com
10

0.002 Low

EPSS

Percentile

52.9%

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin was affected by an Authenticated Cross-Site Scripting (XSS) security vulnerability.

PoC

http://example.com/wp-admin/admin.php?page=blog2social-ship&amp;postId;=70&amp;b2s;_action=1&amp;b2s;_update_publish_date='">

CPENameOperatorVersion
blog2sociallt5.0.3

0.002 Low

EPSS

Percentile

52.9%

Related for WPVDB-ID:E5BCD333-3B62-4FBD-A45E-BB9E515AC880