Lucene search

K
patchstackJohn LeitchPATCHSTACK:7E5A373D6AF75BD599E0BA2A3EDC53DF
HistoryDec 08, 2010 - 12:00 a.m.

WordPress Safe Search Plugin - Cross-Site Scripting Vulnerability

2010-12-0800:00:00
John Leitch
patchstack.com
3

0.002 Low

EPSS

Percentile

57.3%

Safe Search “v1” parameter plugin is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credentials. Other attacks are also possible.

Solution

           Update the plugin. 
CPENameOperatorVersion
safe searchle0.7

0.002 Low

EPSS

Percentile

57.3%

Related for PATCHSTACK:7E5A373D6AF75BD599E0BA2A3EDC53DF