A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.34 is able to address this issue. The patch is identified as b766da8fa100779409a953f0e46c2a2448cbe99c. It is recommended to upgrade the affected component. VDB-225354 is the identifier assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/wp-plugins/facebook-button-plugin/commit/b766da8fa100779409a953f0e46c2a2448cbe99c | Patch |
| https://vuldb.com/?ctiid.225354 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.225354 | Permissions Required Third Party Advisory |
| https://github.com/wp-plugins/facebook-button-plugin/commit/b766da8fa100779409a953f0e46c2a2448cbe99c | Patch |
| https://vuldb.com/?ctiid.225354 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.225354 | Permissions Required Third Party Advisory |
Configurations
History
21 Nov 2024, 02:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/wp-plugins/facebook-button-plugin/commit/b766da8fa100779409a953f0e46c2a2448cbe99c - Patch | |
| References | () https://vuldb.com/?ctiid.225354 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?id.225354 - Permissions Required, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 3.5 |
07 Nov 2023, 02:18
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 |
20 Oct 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| Summary | A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.34 is able to address this issue. The patch is identified as b766da8fa100779409a953f0e46c2a2448cbe99c. It is recommended to upgrade the affected component. VDB-225354 is the identifier assigned to this vulnerability. |
Information
Published : 2023-04-10 04:15
Updated : 2024-11-21 02:03
NVD link : CVE-2014-125097
Mitre link : CVE-2014-125097
CVE.ORG link : CVE-2014-125097
JSON object : View
Products Affected
bestwebsoft
- facebook_button
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')