CVE-2021-24975

MEDIUM 6.1CVE-2021-24975 · Published 01/02/2022 · updated 17/06/2026

In short

CVE-2021-24975 is a MEDIUM (CVSS 6.1) vulnerability affecting social networks auto poster (nextscripts).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.2% of all vulnerabilities.
Fix: update to 4.3.24 or later.

Package	Affected versions	Patched versions
social networks auto poster nextscripts	`< 4.3.24`	`4.3.24`

Description

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

References

plugins.trac.wordpress.org/changeset/2650138 · Patch
wpscan.com/vulnerability/b99dae3d-8230-4427-adc5-4ef9cbfb8ba1 · Exploit

CVE-2021-24975

In short

Description

References

More vulnerabilities in social networks auto poster

CVE-2021-24975

In short

Description

References

More vulnerabilities in social networks auto poster