CVE-2021-24418
Assigner: WPScan
Published: 2021-07-12T19:20:53
State: PUBLISHED
affected: product: Smooth Scroll Page Up/Down Buttons
vendor: Mark Senff
versions: lessThanOrEqual: 1.4
status: affected
version: 1.4
versionType: custom
credits: value: m0ze
descriptions: value: The Smooth Scroll Page Up/Down Buttons WordPress plugin through 1.4 does not properly sanitise and validate its psb_positioning settings, allowing high privilege users such as admin to set an XSS payload in it, which will be executed in all pages of the blog
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: Smooth Scroll Page Up/Down Buttons <= 1.4 - Authenticated Stored XSS via psb_positioning
x_generator: WPScan CVE Generator