CVE-2024-2836
Assigner: WPScan
Published: 2024-04-15T05:00:05.687Z
State: PUBLISHED
title: Super Socializer < 7.13.64 - Editor+ Stored XSS
problemTypes: descriptions: description: CWE-79 Cross-Site Scripting (XSS)
type: CWE
affected: vendor: Unknown
product: Social Share, Social Login and Social Comments Plugin 
versions: status: affected
versionType: semver
version: 0
lessThan: 7.13.64
defaultStatus: unaffected
descriptions: value: The Social Share, Social Login and Social Comments Plugin  WordPress plugin before 7.13.64 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
credits: value: Dmitrii Ignatyev
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator