The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issu…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.03884·Published 2021-06-01·Fixed in 4.0CWE-79