WordPress Plugin Vulnerabilities

Social Connect 0.10.1 - diagnostics/test.php testing Parameter Reflected XSS

Description

The Social Connect WordPress plugin was affected by a diagnostics/test.php testing Parameter Reflected XSS security vulnerability.

Affects Plugins

Plugin icon
social-connect
Fixed in 0.10.2

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
61c24ad1-eb26-4186-b5da-7231b36e6389

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2015-05-15 (about 9 years ago)

Other

Published
Title
Published
2021-02-08
Title
Extra Charges To Payment Gateway For WooCommerce <= 2.0.2.1 - Unauthorised Arbitrary Plugin Settings Change to Stored XSS
Published
2023-01-11
Title
GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSS
Published
2014-11-10
Title
Shareaholic 7.6.0.3 - XSS
Published
2022-12-19
Title
Jetpack CRM < 5.5 - Contributor+ Stored XSS
Published
2024-03-27
Title
WP Staging (Free < 3.4.0, Pro < 5.4.0) - Admin+ Stored XSS