PT-2021-22068

Name of the Vulnerable Software and Affected Versions Advance Search WordPress plugin versions up to and including 1.1.2 Description The issue allows attackers to inject arbitrary web scripts via the wpas id parameter in the /inc/admin/views/html-advance-search-admin-options.php file, enabling...

Advance Search < 1.1.3 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the wpasid parameter found in the /inc/admin/views/html-advance-search-admin-options.php file which allows attackers to inject arbitrary web scripts...