CyberRota Analysis
AI-GeneratedThe NextScripts: Social Networks Auto-Poster plugin for WordPress versions prior to 4.4.8 is vulnerable to reflected Cross-Site Scripting (XSS) due to improper escaping of query-string parameters on an admin page. This vulnerability can be exploited by attackers to execute malicious scripts in the context of logged-in users, including administrators, when they are deceived into clicking on a specially crafted link. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of XSS attacks.
Original NVD Description
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are tricked into opening a crafted link.