Exploit for Simple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site Scripting CVE-2021-24656

Name: Exploit for Simple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site Scripting CVE-2021-24656
Rating: 5 (284 reviews)

2021-09-13 | CVSS 3.5

## https://sploitus.com/exploit?id=WPEX-ID:8E897DCC-6E52-440B-83AD-B119C55751C7
Put the following payload <svg onload=alert(/XSS/)> in the Share Title settings of the plugin (with at least one Social Buttons Designs enabled)

The XSS will be triggered depending on the Post type Settings selected (like just homepage, posts, pages etc)