Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
myStickymenu < 2.5.2 - Authenticated Stored XSS
Vulnerability Description
The Floating Notification Bar, Sticky Menu on Scroll, and Sticky Header for Any Theme – myStickymenu WordPress plugin before 2.5.2 does not sanitise or escape its Bar Text settings, allowing hight privilege users to use malicious JavaScript in it, leading to a Stored Cross-Site Scripting issue, which will be triggered in the plugin's setting, as well as all front-page of the blog (when the Welcome bar is active)
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
WordPress 跨站脚本漏洞
Vulnerability Description
WordPress是WordPress（Wordpress）基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress plugin MyStickymenu 中存在跨站脚本漏洞，该漏洞源于产品的 Floating Notification Bar，Sticky Menu on Scroll 和 Sticky Header 未能正确处理输入的特殊字符。攻击者可通过该漏洞引发客户端代码执行。 以下产品及版本受到影响：MyStickymenu 2.
CVSS Information
N/A
Vulnerability Type
N/A