Blog2Social < 6.8.7 - Cross-Site Scripting (CVE-2021-24956)

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue.Blog2Social：社交媒体自动发布与调度WordPress插件在版本6.8.7之前，未对b2sShowByDate参数进行净化和转义，在输出至管理页面时导致反射型跨站脚本攻击问题。