Skip to content
OpenAdvisories

Product · dartiss

shareopenly

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-48094

    ShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared URL in Content Output

    The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cross-Site Scripting vulnerability caused by the absence of WordPress's `esc_url()` escaping function on the `$url` variable before it is rendered into HTML content. This variable is construct…

    dartiss shareopenly Web / CMS