High · 7.1 CVE-2024-54423 EUVD-2024-52543GHSA-hwq4-qw38-h933

WordPress Social Media Sharing plugin <= 1.1 - CSRF to Stored XSS vulnerability

Published Dec 16, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Jesse Overright Product: Social Media Sharing

Description

Cross-Site Request Forgery (CSRF) vulnerability in Jesse Overright Social Media Sharing social-media-sharing allows Stored XSS.This issue affects Social Media Sharing: from n/a through <= 1.1.

Affected products

Vendor	Product	Affected	Fixed
Jesse Overright	Social Media Sharing	≤ 1.1	—

References

https://patchstack.com/database/Wordpress/Plugin/social-media-sharing/vulnerability/wordpress-social-media-sharing-plugin-1-1-csrf-to-stored-xss-vulnerability?_s_id=cve vdb-entry