CVE-2024-6226

The WpStickyBar WordPress plugin (versions prior to 2.1.1 , including through 2.1.0) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before it is outputted back onto the page. This flaw could be exploited to target ...