Medium · 6.1 CVE-2017-2285 EUVD-2017-11468GHSA-ccv8-jvrf-2cp3

Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script …

Published Aug 2, 2017 · Updated May 6, 2025 · Assigned by jpcert

Vendor: SilkyPress Product: Simple Custom CSS and JS

Description

Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
SilkyPress	Simple Custom CSS and JS	prior to version 3.4	—

References

https://wpvulndb.com/vulnerabilities/8879
JVN#31459091 third-party-advisory
https://wordpress.org/plugins/custom-css-js/#developers
https://plugins.trac.wordpress.org/changeset/1695440/#file6