CVE Database /
CVE-2021-36869
CVE · Medium
CVE-2021-36869 — Ivory Search – WordPress Search Plugin [add-search-to-menu] < 5.4.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-36869
|
Ivory Search – WordPress Search Plugin [add-search-to-menu] < 5.4.4 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.8
|
< 5.4.4
|
5.4.4 |
2021-10-01 |
—
|
CVE-2021-36869
The Ivory Search plugin for WordPress fails to properly sanitize and escape the post parameter before displaying it in an HTML attribute, which allows attackers to inject malicious scripts that execute in a user's browser. The vulnerability affects versions prior to 5.4.4, and a similar sanitization flaw also exists in the data parameter, though that issue went unreported.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings