The Smooth Scroll Page Up/Down Buttons WordPress plugin through 1.4 does not properly sanitise and validate its psb_positioning settings, allowing high privilege users such as admin to set an XSS payload in it, which wil…
The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client side.
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00652·Published 2021-06-01·Fixed in 1.4CWE-79