← Back

Scroll To Top

scroll_to_top

Vendor: Scroll To Top Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Scroll To Top Project
1Scroll To Top
Jun 17, 2026
Sep 19, 2022
N/A· v4
4.8 MEDIUM· v3
N/A· v2
The Scroll To Top WordPress plugin before 1.4.1 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capa...Show more
The Scroll To Top WordPress plugin before 1.4.1 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)Show less