CVE-2021-24331: Smooth Scroll Page Up/down Buttons Project Smooth Scroll Page Up/down Buttons

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The Smooth Scroll Page Up/Down Buttons WordPress plugin before 1.4 did not properly sanitise and validate its settings, such as psb_distance, psb_buttonsize, psb_speed, only validating them client side. This could allow high privilege users (such as admin) to set XSS payloads in them

Affected products

• Smooth Scroll Page Up/down Buttons Project Smooth Scroll Page Up/down Buttons: before 1.4 (fixed in 1.4)

Published 2021-06-01. Last modified 2026-06-17.