Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-43309 EUVD-2024-40201GHSA-mmw6-2gqh-7pr9

WordPress WP Telegram Widget and Join Link plugin <= 2.1.27 - Cross Site Scripting (XSS) vulnerability

Published Aug 18, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Socio WP Telegram Widget and Join Link allows Stored XSS.This issue affects WP Telegram Widget and Join Link: from n/a through 2.1.27.

Affected products

VendorProductAffectedFixed
WP Socio WP Telegram Widget and Join Link ≤ 2.1.27 —

References