CVE-2023-40554: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Blog2Social, Adenion Blog2Social: Social Media Auto Post & Scheduler plugin <= 7.2.0 versions.

PriorityP422medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.35%

27.1th percentile

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Blog2Social, Adenion Blog2Social: Social Media Auto Post & Scheduler plugin <= 7.2.0 versions.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
adenion	blog2social	<= 7.2.0	—
blog2social_adenion	blog2social_social_media_auto_post_scheduler	n/a – 7.2.0	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.