High · 7.1 CVE-2024-51647 EUVD-2024-45463GHSA-8h88-9m7w-74qc

WordPress Featured Posts Scroll plugin <= 1.25 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Published Nov 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Chaser324 Product: Featured Posts Scroll

Description

Cross-Site Request Forgery (CSRF) vulnerability in Chaser324 Featured Posts Scroll allows Stored XSS.This issue affects Featured Posts Scroll: from n/a through 1.25.

Affected products

Vendor	Product	Affected	Fixed
Chaser324	Featured Posts Scroll	≤ 1.25	—

References

https://patchstack.com/database/vulnerability/featured-posts-scroll/wordpress-featured-posts-scroll-plugin-1-25-csrf-to-stored-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry