Medium severity6.1NVD Advisory· Published Feb 1, 2022· Updated Jun 17, 2026

CVE-2021-24975

Description

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Social Networks Auto Poster Facebook Twitter Ginferred
Range: <4.3.24
Package: https://wordpress.org/plugins/social-networks-auto-poster-facebook-twitter-g
Nextscripts/Social Networks Auto Poster
cpe:2.3:a:nextscripts:social_networks_auto_poster:*:*:*:*:*:wordpress:*:*
Range: <4.3.24
WordPress/NextScripts: Social Networks Auto-Posterllm-fuzzy
Range: <4.3.24

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/2650138nvdPatchThird Party Advisory
wpscan.com/vulnerability/b99dae3d-8230-4427-adc5-4ef9cbfb8ba1nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000