CVE-2021-25058

The Buffer Button <= 1.0 - Authenticated Stored Cross Site Scripting (XSS)

The Buffer Button WordPress plugin through 1.0 was vulnerable to Authenticated Stored Cross Site Scripting (XSS) within the Twitter username to mention text field.

Affected

The Buffer Button

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0 NVD

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.60% chance of exploitation in the next 30 days, 48th percentile

Published

2022-02-21

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/fd5271ef-1da5-4d09-888e-f1fd71820cde

References

• CVE Record
• NVD entry