CVE-2021-24992

MEDIO 4.8CVE-2021-24992 · Published 27/12/2021 · updated 17/06/2026

En resumen

CVE-2021-24992 es una vulnerabilidad MEDIO (CVSS 4.8) que afecta a buttonizer (buttonizer).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.62%, mayor que el 49.8% de las vulnerabilidades.
Solución: actualizar a 2.5.5 o posterior.

Package	Affected versions	Patched versions
buttonizer buttonizer	`< 2.5.5`	`2.5.5`

Description

The Smart Floating / Sticky Buttons WordPress plugin before 2.5.5 does not sanitise and escape some parameter before outputting them in attributes and page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

References

wpscan.com/vulnerability/db0b9480-2ff4-423c-a745-68e983ffa12b · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free