TI-2025-12648 CVE-2025-13840 · GHSA-x5rv-rq98-7w2m
Cross-site scripting in bobvanoorschot Bukazu Search Widget
Priority LOW 28
The BUKAZU Search widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shortcode' parameter of the 'bukazu_search' shortcode in all versions up to, and including, 3.3.2 due to insufficient in…