2 matches found
GHSA-X83W-23JP-G6PW OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation
Description A flaw was identified in the OpenSearch Security plugin's document-level security DLS implementation. DLS restrictions were not correctly applied to search queries that use hasparent or haschild join relations. This could allow an authenticated user to access document contents that...
5.3CVSS5.8AI score
SaveExploits0References2
WordPress WP OpenSearch plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin WP OpenSearch versions = 1.0...
7.1CVSS6.1AI score0.00315EPSS
SaveExploits0Affected Software1
20