Wordpress e-search plugin cross-site scripting vulnerability (CNVD-2016-09338)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. e-search is one of the search plug-ins. A cross-site scripting vulnerability exists in version 1.0 of the Wordpress...

Wordpress e-search plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. e-search is one of the search plug-ins. A cross-site scripting vulnerability exists in version 1.0 of the Wordpress...

CVE-2016-1000131

Reflected XSS in wordpress plugin e-search v1.0...

WordPress E-Search Plugin <= 1.0 - Cross-Site Scripting (XSS)

Because of this vulnerability, the variable date-from appears to send unsanitized data back to the users browser. Solution Update the plugin...