plugin

Scroll Baner Vulnerabilities

1 known security issue reported for the Scroll Baner WordPress plugin. Most recent disclosed Sep 20, 2021.

1 high

Running Scroll Baner on your site? Check whether your installed version is affected.

Scroll Baner <= 1.0 - Cross-Site Request Forgery to Remote Code Execution and/or Cross-Site Scripting

high

The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE (via a file upload) as well as XSS

CVSS:: 8.8
Affected:: up to 1.0
Fix:: No patched version reported
Disclosed:: Sep 20, 2021

CVE-2021-24642 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database