The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.9.1 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scr…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00355·Published 2025-05-15·Fixed in 2.9.1CWE-79
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.8.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scr…
CVSS 3.1MEDIUM 5.9·Network·High privileges·User interaction·EPSS 0.00405·Published 2024-04-17·Fixed in 2.8.9CWE-79
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Inisev Social Media & Share Icons allows Stored XSS.This issue affects Social Media & Share Icons: from n/a thr…