Skip to content
Sign in
7.1 High

CVE-2026-109702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affects Social Share Buttons: from n/a through 1.31.

Affected products and versions

Product Affected versions Fixed in
Social Share Buttons 1.31 earliest → 1.31 No fix stated

Other CVEs of Social Share Buttons

The 3 CVEs of Social Share Buttons →
CVE-2026-100108 The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form (containing… 6.4 Medium CVE-2024-9219 The WordPress Social Share Buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use… 6.1 Medium
Track this CVE