CyberRota Analysis
AI-GeneratedThe Social Media Share Buttons & Social Sharing Icons WordPress plugin prior to version 3.0.1 is vulnerable to reflected cross-site scripting due to improper escaping of user input in inline JavaScript event handlers. This vulnerability can be exploited when users interact with the affected buttons, potentially allowing attackers to execute malicious scripts in the context of the user's browser. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to Reflected Cross-Site Scripting which is triggered when a user interacts with the affected button. Exploitation requires the Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 to be running a non-default icon display configuration.