Approved changes feed: RSS · Atom

cpe:2.3:a:wpsocialrocket:social_sharing_plugin:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

VendorWpsocialrocket (08770bf8-e315-5504-b13e-24d00e039d5e)
ProductSocial Sharing Plugin (0cac2b40-9467-52fa-9c6a-dfe54b51054e)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2159 vulnerable 2026-06-08 06:33:30.444542 Sassy Social Share < 3.3.61 - Contributor+ Stored XSS
The Social Sharing Plugin WordPress plugin before 3.3.61 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Published: 2024-04-26T05:00:02.306Z
Updated: 2024-10-30T13:50:02.420Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.