Skip to content
OpenAdvisories
Unscored CVE-2021-24975 EUVD-2021-11887GHSA-gpxw-6663-f9cg

NextScripts: Social Networks Auto-Poster < 4.3.24 - Unauthenticated Stored XSS

Published Feb 1, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

Affected products

VendorProductAffectedFixed
— NextScripts: Social Networks Auto-Poster 4.3.24 – < 4.3.24 4.3.24

References