CVE-2017-18494

The CVE-2017-18494 issue affects the WordPress plugin custom-search-plugin prior to version 1.36 (BestWebSoft). The connected Nuclei template and related records confirm multiple XSS vulnerabilities in this plugin, enabling an attacker (with no special privileges) to inject and execute arbitrary ...