https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T04:51:33.596716+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-16570 CVE-2026-16570 — NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback 2026-10-06T04:51:34.224317+00:00

Affected: Unknown NextScripts: Social Networks Auto-Poster

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.4.8 does not escape some of the query-string parameters it reflects back on one of its admin pages, allowing attackers to perform Reflected Cross-Site Scripting attacks against logged-in users such as administrators who are tricked into opening a crafted link.