plugin

Smooth Page Scroll Updown Buttons Vulnerabilities

4 known security issues reported for the Smooth Page Scroll Updown Buttons WordPress plugin. Most recent disclosed Jul 12, 2021.

2 medium

Running Smooth Page Scroll Updown Buttons on your site? Check whether your installed version is affected.

Scan your site free

Smooth Page Scroll Up/Down Buttons [smooth-page-scroll-updown-buttons] < 1.4

unknown

[en] The Smooth Scroll Page Up/Down Buttons WordPress plugin through 1.4 does not properly sanitise and validate its psb_positioning settings, allowing high privilege users such as admin to set an XSS payload in it, which will be executed in all pages of the blog

Affected:
up to 1.4
Fixed in:
1.4
Disclosed:
Jul 12, 2021

CVE-2021-24418 on NVD →

Smooth Page Scroll Up/Down Buttons [smooth-page-scroll-updown-buttons] < 1.4

unknown

[en] The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client side. This could allow high privilege users (such as admin) to set XSS payloads in them

Affected:
up to 1.4
Fixed in:
1.4
Disclosed:
Jun 1, 2021

CVE-2021-24331 on NVD →

Smooth Scroll Page Up/Down Buttons <= 1.3 - Cross-Site Scripting

medium

The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client side. This could allow high privilege users (such as admin) to set XSS payloads in them

CVSS:
4.8
Affected:
up to 1.3
Fixed in:
1.4
Disclosed:
Apr 24, 2021

CVE-2021-24331 on NVD →

Smooth Scroll Page Up/Down Buttons <= 1.3 - Admin+ Stored Cross-Site Scripting

medium

The Smooth Scroll Page Up/Down Buttons WordPress plugin through 1.4 does not properly sanitise and validate its psb_positioning settings, allowing high privilege users such as admin to set an XSS payload in it, which will be executed in all pages of the blog

CVSS:
4.8
Affected:
up to 1.3
Fixed in:
1.4
Disclosed:
Apr 24, 2021

CVE-2021-24418 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database