CVE-2021-24975: Nextscripts Social Networks Auto Poster

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

Affected products

• Nextscripts Social Networks Auto Poster: before 4.3.24 (fixed in 4.3.24)

Published 2022-02-01. Last modified 2026-06-17.