affanali.dev

$ cat ~/research/cves

Research

Vulnerabilities I found and disclosed that were assigned CVEs. Details below match the official records. Also listed on my Patchstack researcher profile.

  1. CVE-2025-39404

    Open Redirect in Sassy Social Share

    CVSS 4.7 · Medium

    Product
    Sassy Social Share (WordPress plugin)
    Affected
    <= 3.3.73 · fixed in 3.3.74
    Weakness
    CWE-601: URL Redirection to Untrusted Site (Open Redirect)
    Vector
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
    Reach
    100,000+ active installs
    Published
    · credited via Patchstack

    Advisory ↗CVE record ↗

  2. CVE-2025-32248

    CSRF in SwiftXR (3D/AR/VR) Viewer

    CVSS 5.4 · Medium

    Product
    SwiftXR (3D/AR/VR) Viewer (WordPress plugin)
    Affected
    <= 1.0.7
    Weakness
    CWE-352: Cross-Site Request Forgery (CSRF)
    Vector
    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
    Published
    · credited via Patchstack

    Advisory ↗CVE record ↗