Read the docs

Vertical Scroll Recent Post Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Vertical Scroll Recent Post Project records in CISA KEV

No Vertical Scroll Recent Post Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Vertical Scroll Recent Post · all components

Priority LOW 29

The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-05-09 Fixed in 14.0 CWE-79
Open these records in search →