Social Share Button Vulnerabilities

Update the plugin. An unknown person discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Social Share Button Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when gue...

Affected:

up to 2.2

Fixed in:

2.2

Disclosed:

Nov 24, 2023

The Social Share Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ssb_share_content_icon_margin', 'ssb_social_sites_domain', 'ssb_social_sites_domain_url', etc. parameters in versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it pos...

CVSS:

5.5

Affected:

up to 2.1

Fixed in:

2.1.1

Disclosed:

Nov 24, 2015

Because of this vulnerability, authenticated administrators can store HTML or JS code. Update the plugin.

Affected:

up to 2.2

Fixed in:

2.2

Disclosed:

Nov 24, 2015

The Social Share Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ssb_share_content_icon_margin', 'ssb_social_sites_domain', 'ssb_social_sites_domain_url', etc. parameters in versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it pos...

Affected:

up to 2.1.1

Fixed in:

2.1.1

Disclosed:

Nov 24, 2015

Fixed in 2.1.0 but fixed_in set to 2.1.1 to avoid confusion between 2.1 and 2.1.0

Affected:

up to 2.1.1

Fixed in:

2.1.1