Medium severity6.5NVD Advisory· Published Oct 18, 2021· Updated Jun 17, 2026
CVE-2021-24642
CVE-2021-24642
Description
The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE (via a file upload) as well as XSS
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- WordPress/Scroll Banerdescription
- Range: <=1.0
- cpe:2.3:a:scroll_banner_project:scroll_banner:*:*:*:*:*:wordpress:*:*Range: <=1.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/8d9129ab-33c3-44ee-b150-f7552d88e658nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.