← CVE Intelligence

CVE-2021-24564

WPFront Scroll Top < 2.0.6.07225 - Authenticated Stored XSS PUBLISHED

Description (CNA)

The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.

Affected (CNA)

Vendor / productVersions
Unknown / WPFront Scroll Topaffected 2.0.6.07225 before 2.0.6.07225

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.