Lucene search
+L

1 matches found

Patchstack
Patchstack
•added 2026/02/10 11:19 p.m.•14 views

WordPress BuddyHolis ListSearch plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'placeholder' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'placeholder' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin BuddyHolis ListSearch versions = 1.1...

6.4CVSS5.4AI score0.00258EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder