Vulnerability CVE-2022-1512
Published: 2022-05-16

Description:
The ScrollReveal.js Effects WordPress plugin through 1.2 does not sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Type:

CWE-79

 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))

 References:
https://packetstormsecurity.com/files/166820/
https://wpscan.com/vulnerability/a754a516-07fc-44f1-9c34-31e963460301
Copyright 2024, cxsecurity.com

 

Back to Top