Lucene search
Larry W. CashdollarPATCHSTACK:49936A5C4FF871074D56FC3EDF95B8E8HistoryApr 13, 2016 - 12:00 a.m.
WordPress E-Search Plugin <= 1.0 - Cross-Site Scripting (XSS)
2016-04-1300:00:00
Larry W. Cashdollar
patchstack.com
3
0.001 Low
EPSS
Percentile
50.3%
Because of this vulnerability, the variable date-from appears to send unsanitized data back to the users browser.
Solution
Update the plugin.
Related
cvelist
cvelist
CVE-2016-1000131
2016-10-10 20:00:00
cve
cve
CVE-2016-1000131
2016-10-10 20:59:06
prion
prion
Cross site scripting
2016-10-10 20:59:00
nvd
nvd
CVE-2016-1000131
2016-10-10 20:59:06
nuclei
nuclei
WordPress e-search <=1.0 - Cross-Site Scripting
2021-07-16 17:55:47
wpexploit
wpexploit
e-search <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
2016-04-13 00:00:00
wpvulndb
wpvulndb
e-search <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
2016-04-13 00:00:00