CVE-2024-34546
WordPress Sticky Social Link plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Habibur Rahman Sticky Social Link sticky-social-link allows DOM-Based XSS.This issue affects Sticky Social Link: from n/a through <= 2.0.1.
| CWE | CWE-79 |
| Vendor | habibur rahman |
| Product | sticky social link |
| Published | May 8, 2024 |
| Last Updated | Apr 1, 2026 |
Stay Ahead of the Next One
Get instant alerts for habibur rahman sticky social link
Be the first to know when new unknown vulnerabilities affecting habibur rahman sticky social link are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Habibur Rahman / Sticky Social Link
0 ≤ 2.0.1
References
patchstack.com: https://patchstack.com/database/Wordpress/Plugin/sticky-social-link/vulnerability/wordpress-sticky-social-link-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve patchstack.com: https://patchstack.com/database/vulnerability/sticky-social-link/wordpress-sticky-social-link-plugin-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve
Credits
t0y4 | Patchstack Bug Bounty Program