PT-2025-43303
CVE-2025-60135
·
Published
2025-09-26
·
Updated
2025-10-22
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
WeShare Buttons versions through 13.0.0
Description
The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting (XSS). This means that malicious scripts can be stored on the server and executed by other users when they view the affected web page.
Recommendations
Update WeShare Buttons to a version newer than 13.0.0.
Found an issue in the description? Have something to add? Feel free to write us 👾