Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Addtoany Clear all filters
TI-2021-06899 CVE-2021-24616 · GHSA-7c73-p742-56xg

AddToAny Share Buttons < 1.7.48 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The AddToAny Share Buttons WordPress plugin before 1.7.48 does not escape its Image URL button setting, which could lead allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html ca…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00676 Published 2021-11-08 Fixed in 1.7.48 CWE-79
TI-2021-06853 CVE-2021-24568 · GHSA-x39g-7rq2-35qp

AddToAny < 1.7.46 - Authenticated Stored XSS

Priority LOW 25

The AddToAny Share Buttons WordPress plugin before 1.7.46 does not sanitise its Sharing Header setting when outputting it in frontend pages, allowing high privilege users such as admin to perform Cross-Site Scripting att…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-06 Fixed in 1.7.46 CWE-79