Parallax Scrolling Enllax Js Vulnerabilities

The Parallax Scrolling Enllax.js plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 0.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scri...

CVSS:

6.4

Affected:

up to 0.0.6

Fix:

No patched version reported

Disclosed:

Sep 5, 2025

CVE-2025-58830 on NVD →

The Parallax Scrolling Enllax.js plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick...

CVSS:

4.3

Affected:

up to 0.0.6

Fix:

No patched version reported

Disclosed:

Sep 5, 2025

CVE-2025-58831 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in snagysandor Parallax Scrolling Enllax.js allows Cross Site Request Forgery. This issue affects Parallax Scrolling Enllax.js: from n/a through 0.0.6.

Affected:

up to 0.0.6

Fix:

No patched version reported

Disclosed:

Sep 5, 2025

CVE-2025-58831 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snagysandor Parallax Scrolling Enllax.js allows Stored XSS. This issue affects Parallax Scrolling Enllax.js: from n/a through 0.0.6.

Affected:

up to 0.0.6

Fix:

No patched version reported

Disclosed:

Sep 5, 2025

CVE-2025-58830 on NVD →