CVE Database /
CVE-2021-24987
CVE · Medium
CVE-2021-24987 — Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.30
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24987
|
Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.30 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 7.13.30
|
7.13.30 |
2022-03-15 |
—
|
CVE-2021-24987
The Super Socializer plugin before version 7.13.30 contains a reflected cross-site scripting vulnerability in the the_champ_sharing_count AJAX action, which is accessible to both logged-in and unauthenticated users. The plugin fails to properly sanitize and escape the urls parameter before reflecting it in the response, allowing attackers to inject malicious scripts. This flaw enables attackers to execute arbitrary JavaScript in the browsers of users who click on specially crafted links.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings