FiboSearch - AJAX Search for WooCommerce < 1.24.0 - Admin+ Stored Cross-Site Scripting

2023-06-0800:00:00

wpscan.com

fibosearch

woocommerce

stored xss

vulnerability

admin settings

multi-site installations

unfiltered html

EPSS

0.001

Percentile

45.1%

JSON

The plugin does not properly sanitize and escape input in admin settings, leading to a Stored Cross-Site Scripting vulnerability in affected pages for multi-site installations and instances where unfiltered_html is disabled.

References

www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ajax-search-for-woocommerce/fibosearch-ajax-search-for-woocommerce-1230-authenticated-admin-stored-cross-site-scripting

EPSS

0.001

Percentile

45.1%

JSON

Related for WPVDB-ID:5911A466-CE38-4F0D-8FE2-F3F20B0A9584