alexmoss
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| FireCask Like & Share Button | 1 | – | Jan 21, 2025 |
| FireCask’s Twitter Follow Button | 1 | – | Nov 23, 2024 |
| WhatsApp Share Button | 1 | – | Oct 20, 2023 |
Exploited and recent CVEs
- CVE-2024-11226 FireCask Like & Share Button <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter 0.4%
- CVE-2024-10116 Twitter Follow Button <= 0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter 0.4%
- CVE-2023-5668 WhatsApp Share Button <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.4%