CVE-2025-31399 - WordPress CG Scroll To Top plugin <= 3.5 - CSRF to Stored XSS vulnerability

Back Back to CVE browser

HIGH

WordPress CG Scroll To Top plugin <= 3.5 - CSRF to Stored XSS vulnerability

Published Apr 9, 2025

7.1

HIGH

CVSS 3.1

EPSS 0.21%

Description

Cross-Site Request Forgery (CSRF) vulnerability in Chandan Garg CG Scroll To Top cg-scroll-to-top allows Stored XSS.This issue affects CG Scroll To Top: from n/a through <= 3.5.

Affected products

Vendor Chandan Garg Product CG Scroll To Top Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=3.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Chandan Garg

CG Scroll To Top

unaffected

Version	Status	Constraints
0	affected	<=3.5

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-10637		Advisory
https://patchstack.com/database/Wordpress/Plugin/cg-scroll-to-top/vulnerability/wordpress-cg-scroll-to-top-plugin-3-5-csrf-to-stored-xss-vulnerability?_s_id=cve		vdb-entry