← Back

Scroll Top

scroll_top

Vendor: Wpfront • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24564
1Wpfront
1Scroll Top
Jun 17, 2026
Aug 23, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the u...Show more
The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.Show less