CVE-2019-7413

In the Parallax Scroll aka adamrob-parallax-scroll plugin before 2.1 for WordPress, includes/adamrob-parralax-shortcode.php allows XSS via the title text. "parallax" has a spelling change within the PHP filename...

CVE-2019-7413

CVE-2019-7413 concerns the WordPress plugin “Parallax Scroll” (adamrob-parallax-scroll). All documented sources indicate the vulnerability is a cross-site scripting (XSS) flaw in the shortcode handling: the file includes/adamrob-parralax-shortcode.php allows XSS via the title text, with a noted f...