7.1 High

CVE-2025-31902 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems Social Share And Social Locker social-share-and-social-locker-arsocial allows Reflected XSS.This issue affects Social Share And Social Locker: from n/a through <= 1.4.1.

Affected products and versions

Product	Affected versions	Fixed in
Social Share And Social Locker 1.4	earliest → 1.4.1	No fix stated
Social Share And Social Locker 1.4	earliest → 1.4.1	No fix stated

The 2 CVEs of Social Share And Social Locker →

CVE-2025-31911 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in… 9.3 Critical

Do you use Social Share And Social Locker?

Track this CVE Watch Social Share And Social Locker Check my SBOMs

www.cveye.io/en/cve/CVE-2025-31902

Timeline

Published April 3, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-31902 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…

Description

Affected products and versions

Other CVEs of Social Share And Social Locker