2 matches found
CVE-2024-10568
The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
4.7CVSS5.7AI score0.00424EPSS
SaveExploits1References1Affected Software1
CVE-2024-10568 Ajax Search Lite < 4.12.4 - Admin+ Stored XSS
The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
0.00424EPSS
SaveExploits1References1
20