WordPress plugin ScrollReveal.js Effects 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress ScrollReveal.js Effectss plugin version 1.2 and earlier is vulnerable to a cross-site...

CVE-2022-1512: Improper Neutralization of Input During Web Page Generation

The ScrollReveal.js Effects WordPress plugin through 1.2 does not sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...