CVE-2024-52494: Matt Varone, Tim Berneman Dynamic To Top

Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Matt Varone, Tim Berneman Dynamic "To Top" allows Stored XSS.This issue affects Dynamic "To Top": from 3.5.2 through n/a.

Affected products

• Matt Varone, Tim Berneman Dynamic To Top: version 3.5.2 only

Published 2024-12-02. Last modified 2026-06-17.