WordPress Plugin Vulnerabilities

Blog2Social < 5.9.0 - Cross-Site Scripting Issue

Description

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin was affected by a Cross-Site Scripting Issue security vulnerability.

Affects Plugins

Plugin icon
blog2social
Fixed in 5.9.0

References

CVE
CVE-2019-17550

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
b3146aa3-cfae-4098-9af4-4a8aaf26bd28

Timeline

Publicly Published
2019-11-14 (about 6 years ago)
Added
2019-11-14 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-11-01
Title
JS Help Desk – Best Help Desk & Support Plugin < 2.8.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2024-05-31
Title
PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS
Published
2014-06-12
Title
WP Restful <= 0.1 - Multiple XSS
Published
2024-10-25
Title
ElementsKit Elementor addons < 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget
Published
2025-04-10
Title
WP Project Manager < 2.6.23 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload