Lucene search
WPScanCVELIST:CVE-2024-4090HistoryAug 01, 2024 - 6:00 a.m.
CVE-2024-4090 My Sticky Bar < 2.7.2 - Admin+ Stored XSS
2024-08-0106:00:05
WPScan
www.cve.org
1
cve-2024-4090
sticky bar
admin+
wordpress
cross-site scripting
EPSS
0
Percentile
9.4%
The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
CNA Affected
[
{
"vendor": "Unknown",
"product": "Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "2.7.2"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2024-4090
2024-08-01 06:15:02
vulnrichment
vulnrichment
CVE-2024-4090 My Sticky Bar < 2.7.2 - Admin+ Stored XSS
2024-08-01 06:00:05
cve
cve
CVE-2024-4090
2024-08-01 06:15:02
wordfence
wordfence