TI-2012-05492 CVE-2012-20005 · GHSA-9v64-w835-pg55Reflected cross-site scripting in SocialFit WordPress pluginPriority MEDIUM 56SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter.CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00211 · Published 2026-10-20 · No fix listed CWE-79