CVE-2018-0579 - Cross-site scripting vulnerability in Open Graph for Facebook, Google+ and Twitter Card Tags plugin prior to version 2.2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Back Back to CVE browser

MEDIUM

Cross-site scripting vulnerability in Open Graph for Facebook, Google+ and Twitter Card Tags plugin prior to version 2.2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

Published May 14, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 1.05%

Description

Cross-site scripting vulnerability in Open Graph for Facebook, Google+ and Twitter Card Tags plugin prior to version 2.2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor Webdados Product Open Graph for Facebook, Google+ and Twitter Card Tags Default
n/a
- Version
  prior to version 2.2.4.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Webdados

Open Graph for Facebook, Google+ and Twitter Card Tags

n/a

Version	Status	Constraints
prior to version 2.2.4.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://jvn.jp/en/jp/JVN08386386/index.html
third-party-advisoryx_refsource_JVNThird Party AdvisoryVDB Entry
https://wordpress.org/plugins/wonderm00ns-simple-facebook-open-graph-tags/#developers
x_refsource_CONFIRMThird Party Advisory

Link	Providers	Tags
http://jvn.jp/en/jp/JVN08386386/index.html		third-party-advisoryx_refsource_JVNThird Party AdvisoryVDB Entry
https://wordpress.org/plugins/wonderm00ns-simple-facebook-open-graph-tags/#developers		x_refsource_CONFIRMThird Party Advisory