CVE-2021-36869

Description

Reflected Cross-Site Scripting (XSS) vulnerability in WordPress Ivory Search plugin (versions <= 4.6.6). Vulnerable parameter: &post.

Affected Platforms

Weakness Type

CWE-79, CWE-79

References

• https://patchstack.com/database/vulnerability/add-search-to-menu/wordpress-ivory…
• https://wordpress.org/plugins/add-search-to-menu/#developers
• https://patchstack.com/database/vulnerability/add-search-to-menu/wordpress-ivory…
• https://wordpress.org/plugins/add-search-to-menu/#developers