Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-37388 EUVD-2023-41289GHSA-3ccv-5g25-fx4v

WordPress Simple Light Weight Social Share (Tweet, Like, Share and Linkedin) Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Published Aug 10, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Sudipto Pratap Mahato Product: Simple Light Weight Social Share

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sudipto Pratap Mahato Simple Light Weight Social Share plugin <= 2.0 versions.

Affected products

VendorProductAffectedFixed
Sudipto Pratap Mahato Simple Light Weight Social Share ≤ 2.0 —

References