Skip to content
OpenAdvisories

Vendor

jakob42

1 known vulnerabilities.

Products

Reaction Buttons 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2024-13848

    Reaction Buttons <= 2.1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Reaction Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker…

    jakob42 Reaction Buttons Web / CMS