Stored Cross-Site Scripting Vulnerability in All Social Share Options Plugin for WordPress

CVE-2025-10131

What is CVE-2025-10131?

The All Social Share Options plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability due to inadequate input sanitization and output escaping on user-supplied attributes in the 'sc' shortcode. This issue allows authenticated attackers with contributor-level access or higher to inject malicious web scripts into pages, which could execute when users access these compromised pages, posing a significant security risk.

References