Vulnerabilities > CVE-2021-24418 - Unspecified vulnerability in Smooth Scroll Page Up/Down Buttons Project Smooth Scroll Page Up/Down Buttons

047910
CVSS 4.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
smooth-scroll-page-up-down-buttons-project
NVD
Published: 2021-07-12
Updated: 2024-11-21

Summary

The Smooth Scroll Page Up/Down Buttons WordPress plugin through 1.4 does not properly sanitise and validate its psb_positioning settings, allowing high privilege users such as admin to set an XSS payload in it, which will be executed in all pages of the blog

Vulnerable Configurations

Part Description Count
Application
Smooth_Scroll_Page_Up\/Down_Buttons_Project
5

References