Lucene search
+L

2 matches found

OSV
OSV
added 2026/05/07 12:8 a.m.12 views

GHSA-X83W-23JP-G6PW OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation

Description A flaw was identified in the OpenSearch Security plugin's document-level security DLS implementation. DLS restrictions were not correctly applied to search queries that use hasparent or haschild join relations. This could allow an authenticated user to access document contents that...

5.3CVSS5.8AI score
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.6 views

WordPress WP OpenSearch plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP OpenSearch versions = 1.0...

7.1CVSS6.1AI score0.00303EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder