Description
The SocialDriver WordPress theme before version 2024 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties resulting in a cross-site scripting (XSS) attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | socialdriver | < 2024 | 2024 |
References
- https://wpscan.com/vulnerability/99ec0add-8f4d-4d68-91aa-80b1631a53bf/ exploit vdb-entry technical-description
- http://socialdriver.com