Cross site scripting

An issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier for WordPress. This plugin is vulnerable to a stored Cross-site scripting XSS vulnerability. A non-authenticated user can save the plugin settings and inject malicious JavaScript code in the Custom CS...

CVE-2018-11486

Affected product: WordPress MULTIDOTS Advance Search for WooCommerce plugin (versions

CVE-2018-11486: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the MULTIDOTS Advance Search for WooCommerce plugin 1.0.9 and earlier for WordPress. This plugin is vulnerable to a stored Cross-site scripting XSS vulnerability. A non-authenticated user can save the plugin settings and inject malicious JavaScript code in the Custom CS...

PT-2018-10603

Name of the Vulnerable Software and Affected Versions MULTIDOTS Advance Search for WooCommerce plugin versions 1.0.9 and earlier Description The issue is related to a stored Cross-site scripting XSS vulnerability. A non-authenticated user can save the plugin settings and inject malicious JavaScri...