Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

2 records

Vendor: Yellowyard Clear all filters
TI-2023-01050 CVE-2023-1110 · GHSA-4ffg-h2x6-fmr5

Yellow Yard < 2.8.12 - Contributor+ Stored XSS

Priority MEDIUM 58

The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-08-16 Fixed in 2.8.12
TI-2022-01938 CVE-2022-2094 · GHSA-9ccr-2cqc-j2h4

Yellow Yard Searchbar < 2.8.2 - Reflected Cross-Site Scripting

Priority MEDIUM 60

The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-02-08 Fixed in 2.8.2