CVE-2019-17550 - The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS)

Back Back to CVE browser

MEDIUM

The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS)

Published Nov 13, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 1.34%

Description

The Blog2Social plugin before 5.9.0 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the b2s_id parameter. The component is: views/b2s/post.calendar.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://plugins.trac.wordpress.org/changeset/2186043
x_refsource_MISCPatchThird Party Advisory
https://plugins.trac.wordpress.org/log/blog2social/
x_refsource_MISCThird Party Advisory
https://wordpress.org/plugins/blog2social/#developers
x_refsource_MISCProductThird Party Advisory
https://wpvulndb.com/vulnerabilities/9948
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://plugins.trac.wordpress.org/changeset/2186043		x_refsource_MISCPatchThird Party Advisory
https://plugins.trac.wordpress.org/log/blog2social/		x_refsource_MISCThird Party Advisory
https://wordpress.org/plugins/blog2social/#developers		x_refsource_MISCProductThird Party Advisory
https://wpvulndb.com/vulnerabilities/9948		x_refsource_MISCThird Party Advisory