Giters

Julienh / Sharrre

Make your sharing widget! Sharrre is a jQuery plugin that allows you to create nice widgets sharing for Facebook, Twitter, Google Plus (with PHP script) and more.

Home Page:sharrre.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Advisory from Netsparker - vulnerability in Sharre (2.0.1) Social Sharing Plugin

DanielBishtawi opened this issue · comments

commented

Hello,

While testing the Netsparker web application security scanner we identified a vulnerability in Sharre (2.0.1).

Can you please advise whom shall we contact to disclose the vulnerability details so it can be fixed?

Please email me: daniel (at) netsparker (dot) com

Looking forward to hearing from you.

Regards,

Daniel Bishtawi

commented

We are patching the script ourselves so it sanitizes script tags passed in via the URL. Is that the issue?

commented

Hi @DanielBishtawi. Did you receive any reply?

commented

@makmour We received a reply by the vendor stopped responding.

The technical details can be found here: https://www.netsparker.com/web-applications-advisories/ns-18-041-dom-cross-site-scripting-in-sharrre/

commented

Thanks for your fast reply @DanielBishtawi.