CVE-2025-52782

UNKNOWN 0.0

WordPress Scroll UP plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in King Rayhan Scroll UP scroll-to-up allows Reflected XSS.This issue affects Scroll UP: from n/a through <= 2.0.

CWE	CWE-79
Vendor	king rayhan
Product	scroll up
Published	Jun 20, 2025
Last Updated	Apr 1, 2026

Stay Ahead of the Next One

Get instant alerts for king rayhan scroll up

Be the first to know when new unknown vulnerabilities affecting king rayhan scroll up are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

King Rayhan / Scroll UP

0 ≤ 2.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

patchstack.com: https://patchstack.com/database/Wordpress/Plugin/scroll-to-up/vulnerability/wordpress-scroll-up-plugin-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve

Credits

Nguyen Xuan Chien | Patchstack Bug Bounty Program