Unrated severityNVD Advisory· Published Oct 18, 2021· Updated Aug 3, 2024
Scroll Baner <= 1.0 - CSRF to RCE
CVE-2021-24642
Description
The Scroll Baner WordPress plugin through 1.0 does not have CSRF check in place when saving its settings, nor perform any sanitisation, escaping or validation on them. This could allow attackers to make logged in admin change them and could lead to RCE (via a file upload) as well as XSS
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Scroll Banerdescription
- Range: <=1.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/8d9129ab-33c3-44ee-b150-f7552d88e658mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.