Read the docs

Sociable Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Sociable Project records in CISA KEV

No Sociable Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sociable 1 record LOW

Records

1 record in Sociable · all components

TI-2021-06895 CVE-2021-24612 · GHSA-pfqf-wc3x-x6hv

Sociable <= 4.3.4.1 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00643 Published 2021-10-18 No fix listed CWE-79
Open these records in search →