Parallax Scroll <= 2.0.1 - Cross-Site Scripting
mediumIn the Parallax Scroll (aka adamrob-parallax-scroll) plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. ("parallax" has a spelling change within the PHP filename.)
- CVSS:
- 6.1
- Affected:
- up to 2.1
- Fixed in:
- 2.1
- Disclosed:
- Feb 3, 2019