Threat Entry Updated 2024-11-21

CVE-2023-23977 - Social Comments Plugin

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Team Heateor WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments plugin

PLUGIN Social Comments

CVE-2023-23977

MEDIUM CVSS 6.5 2023-04-04

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-0876 - Social Comments Plugin

The Social comments by WpDevArt WordPress plugin before 2.5.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when unfiltered_html is disallowed

PLUGIN Social Comments

CVE-2022-0876

MEDIUM CVSS 4.8 2022-04-25

Risk Score

Open Full Technical Breakdown