CVE-2018-9034

CVE-2018-9034 affects the WordPress Relevanssi plugin, specifically version 4.0.4 (and possibly earlier). The vulnerability is a Reflected XSS in lib/interface.php where the GET parameter tab is read and echoed into HTML without proper escaping, allowing an attacker to inject arbitrary JavaScript...

CVE-2018-9034: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter...

PT-2018-18796

Name of the Vulnerable Software and Affected Versions Relevanssi plugin version 4.0.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary JavaScript or HTML. This is achieved via the tab GET parameter in the lib/interface.php file. Recommendations Fo...