Vulnerabilities > Cybernetikz > Easy Social Icons > 3.2.0

DATE CVE VULNERABILITY TITLE RISK
2023-11-30 CVE-2023-48336 Cross-site Scripting vulnerability in Cybernetikz Easy Social Icons
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cybernetikz Easy Social Icons allows Stored XSS.This issue affects Easy Social Icons: from n/a through 3.2.4.
network
low complexity
cybernetikz CWE-79
5.4
5.4
2022-04-11 CVE-2022-0840 Cross-site Scripting vulnerability in Cybernetikz Easy Social Icons
The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the image_file field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfiltered_html capability is disallowed. 		3.5
3.5