PT-2022-9614 · WordPress · Buffer Button

Rutuja D Shirke · Published 2022-02-21 · Updated 2022-02-28 · CVE-2021-25058

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Buffer Button WordPress plugin version 1.0

Description The issue allows for Authenticated Stored Cross Site Scripting (XSS) within the Twitter username to mention text field.

Recommendations For Buffer Button WordPress plugin version 1.0, update to a version that contains a fix for this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-25058

Affected Products

Buffer Button

References · 3

• 🔥 https://wpscan.com/vulnerability/fd5271ef-1da5-4d09-888e-f1fd71820cde · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-25058 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25058 · Vendor Advisory