Lucene search
Victor PasmanWPVDB-ID:C9A106E1-29AE-47AD-907B-01086AF3D3FBHistoryJul 01, 2022 - 12:00 a.m.
Yellow Yard Searchbar <= 2.7.27 - Reflected Cross-Site Scripting
2022-07-0100:00:00
Victor Pasman
wpscan.com
5
0.001 Low
EPSS
Percentile
35.4%
The plugin does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting
PoC
/?search_job=">
| CPE | Name | Operator | Version |
|---|---|---|---|
| yellow-yard | eq | * |
Related
cvelist
cvelist
CVE-2022-2094 Yellow Yard Searchbar < 2.8.2 - Reflected Cross-Site Scripting
2023-02-08 09:27:51
nvd
nvd
CVE-2022-2094
2023-02-08 10:15:09
cve
cve
CVE-2022-2094
2023-02-08 10:15:09
patchstack
patchstack
wpexploit
wpexploit
Yellow Yard Searchbar <= 2.7.27 - Reflected Cross-Site Scripting
2022-07-01 00:00:00
prion
prion
Cross site scripting
2023-02-08 10:15:00