Beveiligingsadvies

CVE-2025-4133

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-22 06:00:08

Laatst bijgewerkt 2025-05-22 13:24:12

Toegewezen door WPScan

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 8.4.0 does not escape the title of posts when outputting them in a dashboard, which could allow users with the contributor role to perform Cross-Site Scripting attacks.

← Alle CVE's bekijken Bekijk op cve.org ↗