PT-2022-13926

Name of the Vulnerable Software and Affected Versions ScrollReveal.js Effects WordPress plugin versions 1.2 and earlier Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of its settings, even when unfiltered html...

WordPress plugin ScrollReveal.js: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress ScrollReveal.js Effectss plugin version 1.2 and earlier is vulnerable to a cross-site...

CVE-2022-1512: Improper Neutralization of Input During Web Page Generation

The ScrollReveal.js Effects WordPress plugin through 1.2 does not sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...