CVE-2021-24425 myStickymenu < 2.5.2 - Authenticated Stored XSS

The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use malicious JavaScript in it, leading to a Stored Cross-Site Scripting issue,...

CVE-2021-24425

The CVE-2021-24425 entry concerns the WordPress plugin MyStickymenu (myStickymenu) prior to version 2.5.2. The vulnerability is an Authenticated Stored Cross-Site Scripting (XSS) flaw in the Bar Text settings due to insufficient sanitization/escaping, which can be triggered by privileged users an...