HomePentest-Tools.com Logo

Blog2Social < 7.2.1 - Cross-Site Scripting CVE-2023-3936

Severity
CVSSv3 Score
6.1
Vulnerability description

The Blog2Social WordPress plugin before 7.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin\n

Risk description

No risk description to display.

Recommendation

Update to the latest version of the Blog2Social plugin (7.2.1) or apply the vendor-provided patch to mitigate this vulnerability.

Codename
Not available
Detectable with
Network Scanner
Scan engine
Nuclei
Exploitable with Sniper
No
CVE Published
Aug 21, 2023
Detection added at
Software Type
Not available
Vendor
Not available
Product
Not available