Wonderm00Ns Simple Facebook Open Graph Tags Vulnerabilities

The Open Graph and Twitter Card Tags plugin for WordPress is vulnerable to Cross-Site Scripting via the ‘img’ parameter in versions up to, and including, 2.2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVSS:

6.5

Affected:

up to 2.2.4.2

Fixed in:

2.2.4.2

Disclosed:

Jun 27, 2018

The Open Graph and Twitter Card Tags plugin for WordPress is vulnerable to Cross-Site Scripting via the ‘img’ parameter in versions up to, and including, 2.2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

Affected:

up to 2.2.4.2

Fixed in:

2.2.4.2

Disclosed:

Jun 27, 2018

Authenticated Reflected Cross-Site Scripting (XSS) vulnerability found in WordPress Open Graph for Facebook, Google+ and Twitter Card Tags plugin (versions <= 2.2.4).

Affected:

up to 2.2.4.1

Fixed in:

2.2.4.1

Disclosed:

Jun 22, 2018

[en] Cross-site scripting vulnerability in Open Graph for Facebook, Google+ and Twitter Card Tags plugin prior to version 2.2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected:

up to 2.2.4.1

Fixed in:

2.2.4.1

Disclosed:

May 14, 2018

CVE-2018-0579 on NVD →

Cross-site scripting vulnerability in Open Graph for Facebook, Google+ and Twitter Card Tags plugin prior to version 2.2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS:

6.1

Affected:

up to 2.2.4.1

Fixed in:

2.2.4.1

Disclosed:

Apr 27, 2018

CVE-2018-0579 on NVD →

The Open Graph and Twitter Card Tags WordPress plugin was affected by an Unauthenticated Cross-Site Scripting (XSS) security vulnerability.

Affected:

up to 2.2.4.2

Fixed in:

2.2.4.2