Ivory Search – WordPress Search Plugin, 7794b721-bbd5-43f6-b3af-b86426b359a2
- CVE, Research URL
- Application
- Published on
- -
- Research Description
- Ivory Search – WordPress Search Plugin [add-search-to-menu] < 4.5.11 Ivory Search < 4.5.11 - Authenticated Reflected Cross-Site Scripting (XSS) The setting page of Ivory Search 4.5.10 is vulnerable to reflected XSS when a logged in administrator visit a malicious link or page, as it does not sanitise or escape the GET post parameter before outputting it in a tag attribute
- Affected versions
-
max 4.5.11.
- Status
-
vulnerable