PRODUCT PROFILE

blog2social

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2023-39362023/08/22

Blog2Social < 7.2.1 - Cross-Site Scripting

The Blog2Social WordPress plugin before 7.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

blog2socialPoC 已收录RCE

CVSS6.1EPSS 5.9%

中危CVE-2021-249562021/12/21

Blog2Social < 6.8.7 - Cross-Site Scripting

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue.

blog2socialPoC 已收录

CVSS6.1EPSS 1.5%