CVE-2015-3299: Floating Social Bar Project Floating Social Bar

Medium severity, CVSS 6.1. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to original service order.

Affected products

• Floating Social Bar Project Floating Social Bar: up to and including 1.1.6

Published 2017-09-19. Last modified 2026-06-17.