CVE-2021-24975 | BDVDB-2026-168993 Detail

NextScripts: Social Networks Auto-Poster

Description#

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/b99dae3d-8230-4427-adc5-4ef9cbfb8ba1
https://plugins.trac.wordpress.org/changeset/2650138

Exploit#

No public exploit known

History#

Version 12022-02-01Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.