Description (CNA)
Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Floating Social Media Icon plugin (versions <= 4.3.5) Social Media Configuration form. Requires high role user like admin.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Acurax Technologies / Floating Social Media Icon (WordPress plugin) | affected <= 4.3.5 through 4.3.5 |
CWE
CWE-79
References
- https://wordpress.org/plugins/floating-social-media-icon/
- https://patchstack.com/database/vulnerability/floating-social-media-icon/wordpress-floating-social-media-icon-plugin-4-3-5-authenticated-stored-cross-site-scripting-xss-vulnerability
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.