CVE-2021-39321

概要

参考情報

• plugins.trac.wordpress.org/changeset/2600464/sassy-social-share/trunk/admin/class-sassy-social-share-admin.php · Patch
• wordfence.com/blog/2021/10/vulnerability-patched-in-sassy-social-share-plugin · Exploit
• wordfence.com/vulnerability-advisories · Third Party Advisory

sassy social share のその他の脆弱性

• CVE-2025-5528中 6.1The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateor_mastodon…
• CVE-2024-11252中 6.1The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateor_mastodon…
• CVE-2022-4971中 6.1The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateor…
• CVE-2024-4924中 6.1The Social Sharing Plugin WordPress plugin before 3.3.63 does not sanitise and escape some of its settings, which could allow high privileg…
• CVE-2024-2159中 4.7The Social Sharing Plugin WordPress plugin before 3.3.61 does not validate and escape some of its shortcode attributes before outputting th…