Skip to content
OpenAdvisories

Vendor

nextscripts

9 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-3228 Public exploit

    NextScripts: Social Networks Auto-Poster <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nxs_fbembed' Shortcode

    The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `[nxs_fbembed]` shortcode in all versions up to, and including, 4.4.6. This is due to insufficient input sanitization and output escaping on…