Cross-Site Scripting Vulnerability in Floating Social Bar Plugin for WordPress
CVE-2015-5528

Currently unrated

Key Information:

Vendor: Wordpress
Status: Floating Social Bar
Vendor: CVE Published:; 16 July 2015

What is CVE-2015-5528?

A cross-site scripting (XSS) vulnerability exists within the Floating Social Bar plugin for WordPress, specifically in the save_order function located in class-floating-social-bar.php. This flaw enables attackers to execute arbitrary web scripts or HTML code by manipulating the items[] parameter during an fsb_save_order action via wp-admin/admin-ajax.php. If successfully exploited, this vulnerability could lead to unauthorized user actions and data exposure, significantly compromising site security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch