Sassy Social Share vulnerabilities

1 known vulnerability affecting sassy_social_share/sassy_social_share.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-39321HIGHCVSS 8.8v3.3.232021-10-21

CVE-2021-39321 [HIGH] CWE-502 CVE-2021-39321: Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wp_ajax_heateor_sss_import_config AJAX action due to deserialization of unvalidated user supplied inputs via the import_config function found in the ~/admin/class-sassy-social-share-admin.php file. This can be exploited by underprivileged authenticat