CVE-2021-36848: sharethis social media feather – CVSS 4.8 · Watchpost

← All vulnerabilities

CVE-2021-36848

中危 4.8CVE-2021-36848 · Published 11/04/2022 · updated 17/06/2026

要点

CVE-2021-36848 是影响 social media feather (sharethis) 的中危 (CVSS 4.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.60%，高于 48.8% 的漏洞。
修复：升级到 2.0.5 或更高版本。

Package	Affected versions	Patched versions
social media feather sharethis	`< 2.0.5`	`2.0.5`

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Social Media Feather (WordPress plugin) versions <= 2.0.4

References

patchstack.com/database/vulnerability/social-media-feather/wordpress-social-media-feather-plugin-2-0-4-authenticated-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory
wordpress.org/plugins/social-media-feather · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free