PT-2025-43303 · Unknown · Share Buttons

Nabil Irawan · Publicado 2025-10-22 · Atualizado 2025-10-22 · CVE-2025-60135

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WeShare Buttons versions through 13.0.0

Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be stored on the server and executed by other users when they view the affected web page.

Recommendations Update WeShare Buttons to a version newer than 13.0.0.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-60135

Produtos afetados

Share Buttons

Referências · 4

• https://vdp.patchstack.com/database/Wordpress/Plugin/e-mailit/vulnerability/wordpress-weshare-buttons-plugin-13-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/1981046878780477514 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-60135 · Nota de Segurança
• https://vdp.patchstack.com/database/Wordpress/Plugin/e-mailit/vulnerability/wordpress-weshare-buttons-plugin-13-0-0-cross-site-scripting-xss-vulnerability · Nota