The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties resulting in a cross-site scripting (XSS) attack.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00354·Published 2024-02-23·Fixed in 2024CWE-79