Read the docs

UltimatelySocial

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

UltimatelySocial records in CISA KEV

No UltimatelySocial vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Social Media Share Buttons & Social Sharing Icons 5 records LOW Usm Premium 1 record MEDIUM

Records

1 record in Usm Premium · all components

TI-2023-01104 CVE-2023-1166 · GHSA-chj2-8247-g69q

USM Premium < 16.3 - Admin+ Stored XSS

Priority MEDIUM 55

The USM-Premium WordPress plugin before 16.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00477 Published 2023-06-27 Fixed in 16.3
Open these records in search →