WordPress Sassy Social Share Reflected XSS Vulnerability

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability Name: Social Sharing Plugin - Sassy Social Share <= 3.3.69 - Reflected Cross-Site Scripting via heateor_mastodon_share Parameter 2. Vulnerability Type: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 3. CVSS Score: 6.1 (Medium) 4. Public Release Date: November 29, 2024 5. Last Updated Date: November 30, 2024 6. Researcher: mikemyers 7. Affected Versions: <= 3.3.69 8. Fixed Version: 3.3.70 9. Vulnerability Description: Reflected Cross-Site Scripting (XSS) due to improper neutralization of input. 10. Reference Link: plugins.trac.wordpress.org 11. Exploit Details: No detailed exploit information disclosed. 12. Remediation Recommendation: Upgrade to version 3.3.70 or higher. 13. Vulnerability Database: Wordfence Intelligence Vulnerability Database 14. Vulnerability Score: 6.1 (Medium) 15. Vulnerability Public Date: November 29, 2024 16. Vulnerability Update Date: November 30, 2024 17. Researcher: mikemyers 18. Affected Versions: <= 3.3.69 19. Fixed Version: 3.3.70 20. Vulnerability Description: Reflected Cross-Site Scripting (XSS) due to improper neutralization of input. 21. Reference Link: plugins.trac.wordpress.org 22. Exploit Details: No detailed exploit information disclosed. 23. Remediation Recommendation: Upgrade to version 3.3.70 or higher. 24. Vulnerability Database: Wordfence Intelligence Vulnerability Database 25. Vulnerability Score: 6.1 (Medium) 26. Vulnerability Public Date: November 29, 2024 27. Vulnerability Update Date: November 30, 2024 28. Researcher: mikemyers 29. Affected Versions: <= 3.3.69 30. Fixed Version: 3.3.70 31. Vulnerability Description: Reflected Cross-Site Scripting (XSS) due to improper neutralization of input. 32. Reference Link: plugins.trac.wordpress.org 33. Exploit Details: No detailed exploit information disclosed. 34. Remediation Recommendation: Upgrade to version 3.3.70 or higher. 35. Vulnerability Database: Wordfence Intelligence Vulnerability Database 36. Vulnerability Score: 6.1 (Medium) 37. Vulnerability Public Date: November 29, 2024 38. Vulnerability Update Date: November 30, 2024 39. Researcher: mikemyers 40. Affected Versions: <= 3.3.69 41. Fixed Version: 3.3.70 42. Vulnerability Description: Reflected Cross-Site Scripting (XSS) due to improper neutralization of input. 43. Reference Link: plugins.trac.wordpress.org 44. Exploit Details: No detailed exploit information disclosed. 45. Remediation Recommendation: Upgrade to version 3.3.70 or higher. 46. Vulnerability Database: Wordfence Intelligence Vulnerability Database 47. Vulnerability Score: 6.1 (Medium) 48. Vulnerability Public Date: November 29, 2024 49. Vulnerability Update Date: November 30, 2024 50. Researcher: mikemyers 51. Affected Versions: <= 3.3.69 52. Fixed Version: 3.3.70 53. Vulnerability Description: Reflected Cross-Site Scripting (XSS) due to improper neutralization of input. 54. Reference Link: plugins.trac.wordpress.org 55. Exploit Details: No detailed exploit information disclosed. 56. Remediation Recommendation: Upgrade to version 3.3.70 or higher. 57. Vulnerability Database: Wordfence Intelligence Vulnerability Database 58. Vulnerability Score: 6.1 (Medium) 59. Vulnerability Public Date: November 29, 2024 60. Vulnerability Update Date: November 30, 2024 61. Researcher: mikemyers 62. Affected Versions: <= 3.3.69 63. Fixed Version: 3.3.70 64. Vulnerability Description: Reflected Cross-Site Scripting (XSS) due to improper neutralization of input. 65. Reference Link: plugins.trac.wordpress.org 66. Exploit Details: No detailed exploit information disclosed. 67. Remediation Recommendation: Upgrade to version 3.3.70 or higher. 68. Vulnerability Database: Wordfence Intelligence Vulnerability Database 69. Vulnerability Score: 6.1 (Medium) 70. Vulnerability Public Date: November 29, 2024 71. Vulnerability Update Date: November 30, 2024 72. Researcher: mikemyers 73. Affected Versions: <= 3.3.69 74. Fixed Version: 3.3.70 75. Vulnerability Description: Reflected Cross-Site Scripting (XSS) due to improper neutralization of input. 76. Reference Link: plugins.trac.wordpress.org 77. Exploit Details: No detailed exploit information disclosed. 78. Remediation Recommendation: Upgrade to version 3.3.70 or higher. 79. Vulnerability Database: Wordfence Intelligence Vulnerability Database 80. Vulnerability Score: 6.1 (Medium) 81. Vulnerability Public Date: November 29, 2024 82. Vulnerability Update Date: November 30, 2024 83. Researcher: mikemyers 84. Affected Versions: <= 3.3.69 85. Fixed Version: 3.3.70 86. Vulnerability Description: Reflected Cross-Site Scripting (XSS) due to improper neutralization of input. 87. Reference Link: plugins.trac.wordpress.org 88. Exploit Details: No detailed exploit information disclosed. 89. Remediation Recommendation: Upgrade to version 3.3.70 or higher. 90. Vulnerability Database: Wordfence Intelligence Vulnerability Database 91. Vulnerabi

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Sassy Social Share Reflected XSS Vulnerability

More from this source