Lucene search

PRIOn knowledge basePRION:CVE-2014-125097

HistoryApr 10, 2023 - 4:15 a.m.

Cross site scripting

2023-04-1004:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

bestwebsoft

facebook like button

2.33

remote attack

cross site scripting

upgrade

2.34

patch

b766da8fa100779409a953f0e46c2a2448cbe99c

component

vdb-225354

nvd

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.0%

JSON

A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.34 is able to address this issue. The patch is identified as b766da8fa100779409a953f0e46c2a2448cbe99c. It is recommended to upgrade the affected component. VDB-225354 is the identifier assigned to this vulnerability.

CPENameOperatorVersion
facebook_buttonlt2.34

CPE	Name	Operator	Version
	facebook_button	lt	2.34

References

github.com/wp-plugins/facebook-button-plugin/commit/b766da8fa100779409a953f0e46c2a2448cbe99c

vuldb.com/?ctiid.225354

vuldb.com/?id.225354