WordPress Plugin Vulnerabilities

SocialGrid 2.3 - inline-admin.js.php default_services Parameter XSS

Description

The socialgrid WordPress plugin was affected by an inline-admin.js.php default_services Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
socialgrid
No known fix

References

URL
https://seclists.org/bugtraq/2011/Apr/176

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
443eba3c-9267-48ef-8cb7-aef0bce0ce8f

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-07-07
Title
Image Social Feed <= 1.7.6 - Admin+ Stored XSS
Published
2023-12-11
Title
Popup Builder < 4.2.3 - Unauthenticated Stored XSS
Published
2024-10-29
Title
HT Team Member < 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via htteamember Shortcode
Published
2026-01-08
Title
MG AdvancedOptions <= 1.2 - Reflected Cross-Site Scripting
Published
2024-12-11
Title
Ultimate Endpoints With Rest Api <= 2.2.2 - Reflected Cross-Site Scripting