cleantalk
Vulnerabilities and Security Researches

Ivory Search – WordPress Search Plugin, 1b1fe9af-6b09-4239-a0f1-7e503aacecbd

Published on
-
Research Description
Ivory Search &#8211; WordPress Search Plugin [add-search-to-menu] < 5.4.7 Ivory Search &lt; 5.4.7 - Reflected Cross-Site Scripting The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting
Affected versions
max 5.4.7.
Status
vulnerable