Wp Socializer Vulnerabilities

[en] The WP Socializer WordPress plugin before 7.3 does not sanitise and escape some of its Icons settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

Affected:

up to 7.3

Fixed in:

7.3

Disclosed:

Oct 3, 2022

CVE-2022-2763 on NVD →

The WP Socializer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘misc_additional_css’ parameter in versions up to, and including, 7.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and abov...

CVSS:

5.5

Affected:

up to 7.2

Fixed in:

7.3

Disclosed:

Aug 23, 2022

CVE-2022-2763 on NVD →

This plugin is prone to a cross site scripting vulnerability in admin/wpsr-services-selector.php val parameter. Update the plugin.

Affected:

up to 2.4.3

Fixed in:

2.4.3

Disclosed:

Aug 20, 2015

The WP Socializer – Simple & Easy Social Media Share Icons WordPress plugin was affected by an admin/wpsr-services-selector.php val Parameter XSS security vulnerability.

Affected:

up to 2.4.3

Fixed in:

2.4.3