CVE-2023-37388

23th percentile - higher than 23% of all known CVEs

The Simple Light Weight Social Share plugin versions <= 2.0 has a stored Cross-Site Scripting (XSS) vulnerability with admin+ authorization. An attacker can exploit this vulnerability to inject malicious scripts that will be executed in the user's browser context.

This vulnerability may lead to session data theft, administrator account takeover, or other malicious actions, posing a serious threat to the application's security and user data.

It is recommended to update the plugin to the latest version that addresses this vulnerability and to conduct a security audit of the application.