WordPress Social Share Buttons Reflected XSS Vulnerability (CVE-2024-9219)

The following key vulnerability information can be obtained from this webpage screenshot: 1. Vulnerability Name: WordPress Social Share Buttons <= 1.19 - Reflected Cross-Site Scripting 2. CVSS Score: 3.1 (Medium) 3. Public Disclosure Date: October 18, 2024 4. Update Date: October 19, 2024 5. Researcher: Colin Xu 6. Vulnerability Description: The WordPress Social Share Buttons plugin contains a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress. This is caused by the use of the function in all versions (including 1.19) without proper URL escaping. 7. Fix Status: Fixed 8. Affected Versions: <= 1.19 9. Fixed Version: 1.20 10. Vulnerability Type: Plugin 11. Plugin Name: share-button 12. Plugin Link: view on wordpress.org 13. Vulnerability ID: CVE-2024-9219 14. Vulnerability Public Disclosure Date: October 18, 2024 15. Vulnerability Update Date: October 19, 2024 16. Vulnerability Researcher: Colin Xu 17. Vulnerability Description: The WordPress Social Share Buttons plugin contains a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress. This is caused by the use of the function in all versions (including 1.19) without proper URL escaping. 18. Fix Status: Fixed 19. Affected Versions: <= 1.19 20. Fixed Version: 1.20 21. Vulnerability Type: Plugin 22. Plugin Name: share-button 23. Plugin Link: view on wordpress.org 24. Vulnerability ID: CVE-2024-9219 25. Vulnerability Public Disclosure Date: October 18, 2024 26. Vulnerability Update Date: October 19, 2024 27. Vulnerability Researcher: Colin Xu 28. Vulnerability Description: The WordPress Social Share Buttons plugin contains a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress. This is caused by the use of the function in all versions (including 1.19) without proper URL escaping. 29. Fix Status: Fixed 30. Affected Versions: <= 1.19 31. Fixed Version: 1.20 32. Vulnerability Type: Plugin 33. Plugin Name: share-button 34. Plugin Link: view on wordpress.org 35. Vulnerability ID: CVE-2024-9219 36. Vulnerability Public Disclosure Date: October 18, 2024 37. Vulnerability Update Date: October 19, 2024 38. Vulnerability Researcher: Colin Xu 39. Vulnerability Description: The WordPress Social Share Buttons plugin contains a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress. This is caused by the use of the function in all versions (including 1.19) without proper URL escaping. 40. Fix Status: Fixed 41. Affected Versions: <= 1.19 42. Fixed Version: 1.20 43. Vulnerability Type: Plugin 44. Plugin Name: share-button 45. Plugin Link: view on wordpress.org 46. Vulnerability ID: CVE-2024-9219 47. Vulnerability Public Disclosure Date: October 18, 2024 48. Vulnerability Update Date: October 19, 2024 49. Vulnerability Researcher: Colin Xu 50. Vulnerability Description: The WordPress Social Share Buttons plugin contains a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress. This is caused by the use of the function in all versions (including 1.19) without proper URL escaping. 51. Fix Status: Fixed 52. Affected Versions: <= 1.19 53. Fixed Version: 1.20 54. Vulnerability Type: Plugin 55. Plugin Name: share-button 56. Plugin Link: view on wordpress.org 57. Vulnerability ID: CVE-2024-9219 58. Vulnerability Public Disclosure Date: October 18, 2024 59. Vulnerability Update Date: October 19, 2024 60. Vulnerability Researcher: Colin Xu 61. Vulnerability Description: The WordPress Social Share Buttons plugin contains a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress. This is caused by the use of the function in all versions (including 1.19) without proper URL escaping. 62. Fix Status: Fixed 63. Affected Versions: <= 1.19 64. Fixed Version: 1.20 65. Vulnerability Type: Plugin 66. Plugin Name: share-button 67. Plugin Link: view on wordpress.org 68. Vulnerability ID: CVE-2024-9219 69. Vulnerability Public Disclosure Date: October 18, 2024 70. Vulnerability Update Date: October 19, 2024 71. Vulnerability Researcher: Colin Xu 72. Vulnerability Description: The WordPress Social Share Buttons plugin contains a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress. This is caused by the use of the function in all versions (including 1.19) without proper URL escaping. 73. Fix Status: Fixed 74. Affected Versions: <= 1.19 75. Fixed Version: 1.20 76. Vulnerability Type: Plugin 77. Plugin Name: share-button 78. Plugin Link: view on wordpress.org 79. Vulnerability ID: CVE-2024-9219 80. Vulnerability Public Disclosure Date: October 18, 2024 81. Vulnerability Update Date: October 19, 2024 82. Vulnerability Researcher: Colin Xu 83. Vulnerability Description: The WordPress Social Share Buttons plugin contains a Reflected Cross-Site Scripting (XSS) vulnerability in WordPress. This is caused by the use of the function in all versions (including 1.19) without proper URL escaping. 84. Fix Status: Fixed 85. Affected Versions: <= 1.19 86. Fixed Version: 1.20 87. Vulnerability Type: Plugin 88. Plugin Name: share-button 89. Plugin Link

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Social Share Buttons Reflected XSS Vulnerability (CVE-2024-9219)

More from this source