CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2021/10/21 9:15 p.m.•21 views

CVE-2021-36869

Reflected Cross-Site Scripting XSS vulnerability in WordPress Ivory Search plugin versions = 4.6.6. Vulnerable parameter: &post...

6.1CVSS0.00731EPSS

Exploits1References2

Vulnrichment•added 2021/10/21 8:18 p.m.•4 views

CVE-2021-36869 WordPress Ivory Search plugin <= 4.6.6 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability in WordPress Ivory Search plugin versions = 4.6.6. Vulnerable parameter: &post...

4.8CVSS5.7AI score0.00731EPSS

Exploits1References2

CVE•added 2021/10/21 8:18 p.m.•67 views

CVE-2021-36869

CVE-2021-36869 affects WordPress Ivory Search plugin (versions ≤ 4.6.6). The vulnerability is a Reflected Cross‑Site Scripting (XSS) in the post parameter, caused by insufficient sanitization/escaping when outputting data in an attribute. Impact is XSS with potential client-side code execution as...

6.1CVSS5.5AI score0.00731EPSS

Exploits1References2Affected Software1