Vulnerabilities

TI-2022-04431 CVE-2022-4835 · GHSA-g7rg-6958-g2v5

Social Sharing Toolkit <= 2.6 - Contributor+ Stored XSS via Shortcode

MEDIUM 58

The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-01-30 No fix listed

TI-2013-02362 CVE-2013-2701 · GHSA-cjc2-jxwq-w9rh

Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin 2.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin settings…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0097 Published 2013-11-01 No fix listed CWE-352

TI-2013-05262 CVE-2013-6280 · GHSA-v522-qrcv-m32v

Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2…

LOW 23

Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01602 Published 2013-10-25 No fix listed CWE-79

Vulnerabilities

Filters

Social Sharing Toolkit <= 2.6 - Contributor+ Stored XSS via Shortcode

Cross-site request forgery (CSRF) vulnerability in the Social Sharing Toolkit plugin…

Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2…