CVE

CVE-2021-24987

6.1

CVSS

Description

The Social Share, Social Login and Social Comments Plugin WordPress plugin before 7.13.30 does not sanitise and escape the urls parameter in its the_champ_sharing_count AJAX action (available to both unauthenticated and authenticated users) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue.

Attack Vector

Privileges Req.

User Interaction

social share, social login and social comments plugin – super socializer

Updated Oct 24, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2021-24987 Scanner

CVE-2021-24987 scanner - Cross-Site Scripting (XSS) vulnerability in Social Share, Social Login and Social Comments Plugin for WordPress

Used 2.4k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: social share, social login and social comments plugin – super socializer

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →