6.1
CVSSv3

CVE-2023-1435

Published: 24/04/2023 Updated: 07/11/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

The Ajax Search Pro WordPress plugin prior to 4.26.2 does not sanitise and escape various parameters before outputting them back in pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ajax search project ajax search