Read the docs

Scroll Banner Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Scroll Banner Project records in CISA KEV

No Scroll Banner Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Scroll Banner · all components

TI-2021-06925 CVE-2021-24642 · GHSA-mm76-wgcc-5xg2

Scroll Baner <= 1.0 - CSRF to RCE

Priority LOW 30

The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00572 Published 2021-10-18 No fix listed CWE-352
Open these records in search →