What the vulnerability does
01Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Processby Anchor smooth scroll anchor-smooth-scroll allows PHP Local File Inclusion.This issue affects Anchor smooth scroll: from n/a through <= 1.0.2.
Explanation of Vulnerability in Simple Terms
02Summary
Anchor Smooth Scroll versions 1.0.2 and earlier contain a vulnerability that allows an attacker to read sensitive data, modify site content, or disrupt service availability. The attack requires high technical complexity but no authentication or user interaction. The exact attack vector is unclear due to incomplete vulnerability classification data.
What an attacker can do
03Attacker Capabilities
Read sensitive data, modify site content, or cause the site to become unavailable.
Potential impact on your site
04Site Impact
Potential data breach, unauthorized content changes, or service disruption depending on attacker capability.
Conditions required to exploit
05Prerequisites
Network access; no authentication required, but attack complexity is high.
Key dates
06Disclosure timeline
December 18, 2025
CVE published
April 28, 2026
Record updated