PT-2021-15950
CVE-2021-24418
·
تاريخ النشر
2021-07-12
·
تاريخ التحديث
2021-07-15
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Smooth Scroll Page Up/Down Buttons WordPress plugin versions 1.4 and earlier
Description
The issue allows high privilege users, such as admins, to set an XSS payload in the psb positioning settings, which will be executed in all pages of the blog. This occurs due to the plugin's failure to properly sanitise and validate its settings.
Recommendations
For Smooth Scroll Page Up/Down Buttons WordPress plugin versions 1.4 and earlier, update to a version that properly sanitises and validates the psb positioning settings to prevent XSS payload execution.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾