Unrated severityNVD Advisory· Published May 15, 2025· Updated May 20, 2025

My Sticky Bar < 2.6.8 - Admin+ Stored XSS

CVE-2024-2643

Description

The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.6.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Anydescription
Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any/WordPress pluginllm-create
Range: <2.6.8
WordPress/WordPresswp-canonicalize
Package: https://wordpress.org/plugins/wordpress

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

wpscan.com/vulnerability/194ebf81-8fe4-4c74-8174-35d0ac00ac93/mitreexploitvdb-entrytechnical-description

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000