CVE-2021-24975

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

Score

CVSS 3.1 6.1 Medium

Status

Modified - contact@wpscan.com

Published

2022-02-01

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Social Networks Auto Poster (Nextscripts)
• Nextscripts Social Networks Auto-poster (Unknown)

References

• https://plugins.trac.wordpress.org/changeset/2650138
• https://wpscan.com/vulnerability/b99dae3d-8230-4427-adc5-4ef9cbfb8ba1