Approved changes feed: RSS · Atom

cpe:2.3:a:page_scroll_to_id_project:page_scroll_to_id:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorPage Scroll To Id Project (98f912d8-ad5e-57a2-a7bc-13e36ed1cd3f)
ProductPage Scroll To Id (5a5e536e-91b9-593a-8d52-4a5aec505bb7)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/malihu/page-scroll-to-id purl2cpe 2026-06-01 10:16:09.739166
pkg:github/wp-plugins/page-scroll-to-id purl2cpe 2026-06-01 10:16:09.739169
pkg:github/wpplugins/page-scroll-to-id purl2cpe 2026-06-01 10:16:09.739172

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4449 vulnerable 2026-06-08 05:51:59.504659 Page Scroll To ID < 1.7.6 - Contributor+ Stored XSS
The Page scroll to id WordPress plugin before 1.7.6 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
Published: 2023-01-16T15:37:41.047Z
Updated: 2025-04-07T18:12:07.084Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.