CVE-2022-2094

CVE-2022-2094 affects the Yellow Yard Searchbar WordPress plugin, versions prior to 2.8.2. Root cause: the plugin does not escape certain URL parameters before echoing them back to the user, enabling a Reflected Cross-Site Scripting (XSS) vulnerability. Exploitation details are present in connect...

CVE-2023-1110

The CVE-2023-1110 entry concerns the Yellow Yard Searchbar WordPress plugin (versions before 2.8.12). The connected sources confirm a concrete vulnerability: the plugin does not validate and escape certain shortcode attributes before echoing them in the page/post, enabling Stored Cross-Site Scrip...