Floating Social Bar

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-3299 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to original. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS WordPress Floating Social Bar

NVD

CVSS 3.0

6.1

EPSS

0.3%

CVE-2015-5528 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in the save_order function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for WordPress allows remote attackers to inject. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS WordPress PHP Floating Social Bar

NVD

CVSS 2.0

4.3

EPSS

0.5%

CVE-2015-3299

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

XSS WordPress Floating Social Bar

NVD

CVE-2015-5528

EPSS 0% CVSS 4.3

MEDIUM POC This Month

XSS WordPress PHP +1

NVD