Lucene search

K
wpvulndbRandom RobbieWPVDB-ID:F434AFD3-7DE4-4BF4-A9BB-9F9AEAAE1DC5
HistoryAug 14, 2023 - 12:00 a.m.

Multiple Themes - Reflected XSS

2023-08-1400:00:00
Random Robbie
wpscan.com
7
themes
reflected xss
search box
unauthenticated attacker
malicious link
software

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

51.2%

Description The themes suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.

PoC

https://example.com/?s=katana![](/)/asd/

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

51.2%

Related for WPVDB-ID:F434AFD3-7DE4-4BF4-A9BB-9F9AEAAE1DC5