CVE-2024-7133: My Sticky Bar < 2.7.3 - Admin+ Stored XSS
The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.3 does not validate and escape some of its settings before outputting them back in the page, which could allow users with a high role to perform Stored Cross-Site Scripting attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7133?
CVE-2024-7133 is considered a high severity vulnerability due to its potential for unauthorized data manipulation.
How do I fix CVE-2024-7133?
To fix CVE-2024-7133, update the Premio My Sticky Bar plugin to version 2.7.3 or later.
Who is affected by CVE-2024-7133?
CVE-2024-7133 affects users of the Premio My Sticky Bar plugin versions prior to 2.7.3.
What type of vulnerability is CVE-2024-7133?
CVE-2024-7133 is a stored cross-site scripting (XSS) vulnerability.
What are the potential consequences of CVE-2024-7133?
The potential consequences of CVE-2024-7133 include the ability for high-privilege users to inject malicious scripts into web pages.