CVE-2023-1110

The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attack...

CVE-2023-1110 Yellow Yard < 2.8.12 - Contributor+ Stored XSS

The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attack...

CVE-2023-1110 Yellow Yard < 2.8.12 - Contributor+ Stored XSS

The Yellow Yard Searchbar WordPress plugin before 2.8.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attack...

CVE-2023-1110

The CVE-2023-1110 entry concerns the Yellow Yard Searchbar WordPress plugin (versions before 2.8.12). The connected sources confirm a concrete vulnerability: the plugin does not validate and escape certain shortcode attributes before echoing them in the page/post, enabling Stored Cross-Site Scrip...