Ivory Search – WordPress Search Plugin, 8eb624d0-4d43-4c25-86b7-41ff5d595bb8
- CVE, Research URL
- Application
- Published on
- -
- Research Description
- Ivory Search – WordPress Search Plugin [add-search-to-menu] < 4.8 Ivory Search < 4.8 - Contributor+ Stored Cross-Site Scripting The plugin dos not escape the id argument of its shortcode, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks
- Affected versions
-
max 4.8.
- Status
-
vulnerable