Lucene search

K
wpexploitWpvulndbWPEX-ID:30A83491-2F59-4C41-98BD-A9E6E5A609D4
HistoryAug 13, 2020 - 12:00 a.m.

Nova Lite < 1.3.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)

2020-08-1300:00:00
wpvulndb
18

0.001 Low

EPSS

Percentile

42.0%

The theme did not properly sanitise the search query, leading to an unauthenticated reflected Cross-Site Scripting issue

/?s=%3Cimg%20src%20onerror=alert(/XSS/)%3E

0.001 Low

EPSS

Percentile

42.0%

Related for WPEX-ID:30A83491-2F59-4C41-98BD-A9E6E5A609D4