Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-84097
HistoryMar 31, 2022 - 12:00 a.m.

Wordpress Plugin Ivory Search Cross-Site Scripting Vulnerability

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

24.8%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in versions prior to Wordpress Plugin Ivory Search 5.4.1, which stems from the plugin’s failure to escape certain form settings, and a highly privileged An attacker could exploit this vulnerability to perform cross-site scripting attacks.

0.001 Low

EPSS

Percentile

24.8%