CVE-2014-125097 - BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scripting

Back Back to CVE browser

MEDIUM

BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scripting

Published Apr 10, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.47%

Description

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.34 is able to address this issue. The patch is identified as b766da8fa100779409a953f0e46c2a2448cbe99c. It is recommended to upgrade the affected component. VDB-225354 is the identifier assigned to this vulnerability.

Affected products

Vendor BestWebSoft Product Facebook Like Button Default
unknown
Affected
- 2.0
- 2.1
- 2.10
- 2.11
- 2.12
- 2.13
- 2.14
- 2.15
- 2.16
- 2.17
- 2.18
- 2.19
- 2.2
- 2.20
- 2.21
- 2.22
- 2.23
- 2.24
- 2.25
- 2.26
- 2.27
- 2.28
- 2.29
- 2.3
- 2.30
- 2.31
- 2.32
- 2.33
- 2.4
- 2.5
- 2.6
- 2.7
- 2.8
- 2.9

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
BestWebSoft	Facebook Like Button	unknown	Affected 2.0 2.1 2.10 2.11 2.12 2.13 2.14 2.15 2.16 2.17 2.18 2.19 2.2 2.20 2.21 2.22 2.23 2.24 2.25 2.26 2.27 2.28 2.29 2.3 2.30 2.31 2.32 2.33 2.4 2.5 2.6 2.7 2.8 2.9

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1265
Advisory
https://github.com/wp-plugins/facebook-button-plugin/commit/b766da8fa100779409a953f0e46c2a2448cbe99c
patch
https://vuldb.com/?ctiid.225354
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.225354
vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1265		Advisory
https://github.com/wp-plugins/facebook-button-plugin/commit/b766da8fa100779409a953f0e46c2a2448cbe99c		patch
https://vuldb.com/?ctiid.225354		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.225354		vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Apr 10, 2023

Updated Aug 6, 2024

Reserved Apr 8, 2023

Link CVE-2014-125097

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2014-125097

Red Hat

No data

ENISA EUVD

Assigner VulDB

Published Apr 10, 2023

Updated Aug 6, 2024

Link EUVD-2014-1265

GitHub

No data