Lucene search

K
nvd[email protected]NVD:CVE-2024-7084
HistoryAug 06, 2024 - 6:15 a.m.

CVE-2024-7084

2024-08-0606:15:36
web.nvd.nist.gov
9
ajax search lite
wordpress plugin
cross-site scripting

EPSS

0

Percentile

9.5%

The Ajax Search Lite WordPress plugin before 4.12.1 does not sanitise and escape some parameters, which could allow users with a role as low as Admin+ to perform Cross-Site Scripting attacks.

EPSS

0

Percentile

9.5%

Related for NVD:CVE-2024-7084