Scroll To Top Plugin by InThisCode Security & Risk Analysis

The plugin 'scroll-to-top-inthiscode' v1.4 exhibits a concerning security posture primarily due to a complete lack of output escaping. While the static analysis shows no dangerous functions, SQL queries are prepared, and there are no identified vulnerabilities in its history or taint flows, the absence of proper output escaping is a significant weakness. This means that any data displayed to users could potentially be manipulated by an attacker, leading to cross-site scripting (XSS) vulnerabilities. The plugin also has no visible entry points that require authentication, which, combined with the lack of escaping, increases the risk. Although the plugin has no recorded vulnerabilities and employs good practices in other areas like SQL handling, the critical oversight in output sanitization overshadows these strengths and presents a clear risk to users.