cleantalk
Vulnerabilities and Security Researches

Relevanssi – A Better Search, df21da3493d505c0d60078b5df61ea0d06c877c0

Published on
Feb 24, 2011
Research Description
Relevanssi &#8211; A Better Search [relevanssi] < 2.7.3 WordPress Relevanssi Plugin 2.7.2- Stored XSS Relevanssi plugin is prone to a stored cross-site scripting vulnerability that exists because of "search Query" variable is displayed and logged unsanitized in the "User Searches" section in the admin Dashboard. This vulnerability allows an attacker to inject malicious HTML code.
Affected versions
max 2.7.3.
Status
vulnerable