Stored XSS Vulnerability in Parallax Scrolling Enllax.js by Snagysandor
CVE-2025-58830

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Parallax Scrolling Enllax.js
Vendor
CVE Published:
5 September 2025

What is CVE-2025-58830?

A Cross-site Scripting (XSS) vulnerability exists in the Parallax Scrolling Enllax.js library created by Snagysandor. Due to improper neutralization of input during web page generation, an attacker could exploit this vulnerability to inject malicious scripts into web pages viewed by users. The affected version, up to 0.0.6, permits the execution of stored scripts, potentially compromising the security and data integrity for users interacting with the application.

Affected Version(s)

Parallax Scrolling Enllax.js <= 0.0.6

References

https://patchstack.com/database/wordpress/plugin/parallax...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mika (Patchstack Alliance)
.