Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
1 selected

1 record

Vendor: Wp Extended Search Project Clear all filters
TI-2022-04249 CVE-2022-4649 · GHSA-gmqc-gh8m-mgh5

WP Extended Search < 2.1.2 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The WP Extended Search WordPress plugin before 2.1.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00484 Published 2023-01-30 Fixed in 2.1.2