SocialFit vulnerabilities

CVEs whose affected-version data names the SocialFit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2012-20005Medium· 6.1

yesterday

SocialFit WordPress Plugin 1.2.2 Reflected XSS via popup.php msg Parameter

SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg parameter. Attackers can craft GET requests to /wp-conte…

▾ SunlitŁukasz Więcek · SocialFitvia CVEORG