CVE-2021-24234 Ivory Search < 4.6.1 - Reflected Cross Site Scripting (XSS)

The Search Forms page of the Ivory Search WordPress lugin before 4.6.1 did not properly sanitise the tab parameter before output it in the page, leading to a reflected Cross-Site Scripting issue when opening a malicious crafted link as a high privilege user. Knowledge of a form id is required to...

CVE-2021-24234

CVE-2021-24234 affects the WordPress Ivory Search plugin prior to 4.6.1. The vulnerability is a reflected XSS caused by improper sanitization of the tab parameter in the Search Forms page, exploitable by sending a crafted link; knowledge of a form ID is required. Impact described in sources inclu...