Lucene search

K
wpvulndbWpvulndbWPVDB-ID:52841B21-493F-4E63-BCBF-528089955E4F
HistoryAug 22, 2022 - 12:00 a.m.

Search Exclude < 1.2.7 - Author+ Stored Cross-Site Scripting

2022-08-2200:00:00
wpscan.com
3

0.001 Low

EPSS

Percentile

22.7%

The plugin does not sanitise and escape some parameters which could allow users with a role as low as editor to perform Stored Cross-Site Scripting attacks

CPENameOperatorVersion
search-excludelt1.2.7

0.001 Low

EPSS

Percentile

22.7%

Related for WPVDB-ID:52841B21-493F-4E63-BCBF-528089955E4F