← Database

CVE-2021-38353

MEDIUM CVSS: 6.1 Published: 2021-09-10 Modified: 2026-06-17

Description

The Dropdown and scrollable Text WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the content parameter found in the ~/index.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.

Affected Platforms

Webodid Dropdown And Scrollable Text

Weakness Type

CWE-79, CWE-79

References