Unrated severityNVD Advisory· Published Mar 28, 2022· Updated Aug 3, 2024
Sassy Social Share < 3.3.40 - Reflected Cross-Site Scripting
CVE-2021-24746
Description
The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the viewed post URL before outputting it back in onclick attributes when the "Enable 'More' icon" option is enabled (which is the default setting), leading to a Reflected Cross-Site Scripting issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <3.3.40
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/99f4fb32-e312-4059-adaf-f4cbaa92d4famitrex_refsource_MISC
News mentions
0No linked articles in our index yet.