WordPress Plugin AccessPress Social Icons 1.8.2 Stored XSS
Vulnerability Description
AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering JavaScript payloads into the 'icon title' field. Attackers can store XSS payloads like image tags with onerror event handlers that execute when the plugin page is viewed, affecting all users who access the plugin interface.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47910
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Murat DEMIRCI (@butterflyhunt3r)
Affected Vendor
Accesspressthemes
View all reports →