CVE-2021-24746
Assigner: WPScan
Published: 2022-03-28T17:20:47
State: PUBLISHED
affected: product: Social Sharing Plugin – Sassy Social Share
vendor: Unknown
versions: lessThan: 3.3.40
status: affected
version: 3.3.40
versionType: custom
credits: value: Paul J. Martinez
descriptions: value: The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled (which is the default setting), leading to a Reflected Cross-Site Scripting issue.
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: EXTERNAL
title: Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting
x_generator: WPScan CVE Generator