Lucene search

K
wpvulndbWpvulndbWPVDB-ID:A2F32650-E19E-44C9-91EC-D7E72BB80E1F
HistoryApr 17, 2023 - 12:00 a.m.

Responsive Filterable Portfolio < 1.0.20 - Reflected XSS

2023-04-1700:00:00
wpscan.com
5
portfolio
filterable
plugin
vulnerability
cross-site scripting
admin
security

0.001 Low

EPSS

Percentile

50.7%

The plugin does not sanitise and escape the search_term parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

0.001 Low

EPSS

Percentile

50.7%

Related for WPVDB-ID:A2F32650-E19E-44C9-91EC-D7E72BB80E1F