Medium severity6.1NVD Advisory· Published Nov 13, 2019· Updated Jun 17, 2026
CVE-2019-17550
CVE-2019-17550
Description
The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2s_id parameter. The component is: views/b2s/post.calendar.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- WordPress/Blog2Social plugindescription
Patches
Vulnerability mechanics
References
4- plugins.trac.wordpress.org/changeset/2186043nvdPatchThird Party Advisory
- plugins.trac.wordpress.org/log/blog2social/nvdThird Party Advisory
- wordpress.org/plugins/blog2social/nvdProductThird Party Advisory
- wpvulndb.com/vulnerabilities/9948nvdThird Party Advisory
News mentions
0No linked articles in our index yet.