Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-49189 EUVD-2023-53194GHSA-fv75-q8rq-39gj

WordPress Social Share Buttons & Analytics Plugin – GetSocial.io Plugin <= 4.3.12 is vulnerable to Cross Site Scripting (XSS)

Published Dec 15, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Getsocial, S.A. Social Share Buttons & Analytics Plugin – GetSocial.Io allows Stored XSS.This issue affects Social Share Buttons & Analytics Plugin – GetSocial.Io: from n/a through 4.3.12.

Affected products

VendorProductAffectedFixed
Getsocial Social Share Buttons & Analytics Plugin – GetSocial.io ≤ 4.3.12 —

References