Lucene search
PRIOn knowledge basePRION:CVE-2018-11486HistoryJun 01, 2018 - 3:29 p.m.
Cross site scripting
2018-06-0115:29:00
PRIOn knowledge base
www.prio-n.com
4
An issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier for WordPress. This plugin is vulnerable to a stored Cross-site scripting (XSS) vulnerability. A non-authenticated user can save the plugin settings and inject malicious JavaScript code in the Custom CSS textarea field, which will be loaded on every site page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| advance_search_for_woocommerce | le | 1.0.9 |
Related
cvelist
cvelist
CVE-2018-11486
2018-06-01 15:00:00
nvd
nvd
CVE-2018-11486
2018-06-01 15:29:00
patchstack
patchstack
cve
cve
CVE-2018-11486
2018-06-01 15:29:00
wpvulndb
wpvulndb
Advance Search for WooCommerce < 1.1 - Multiple XSS
2018-06-04 00:00:00