Skip to content
OpenAdvisories
Unscored CVE-2021-25058 EUVD-2021-11970GHSA-c7wh-fj95-xw47

The Buffer Button <= 1.0 - Authenticated Stored Cross Site Scripting (XSS)

Published Feb 21, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting (XSS) within the Twitter username to mention text field.

Affected products

VendorProductAffectedFixed
— The Buffer Button 1.0 – ≤ 1.0 —

References