CVE Database /
CVE-2023-1420
CVE · Medium
CVE-2023-1420 — Ajax Search Lite – Live Search & Filter [ajax-search-lite] < 4.11.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-1420
|
Ajax Search Lite – Live Search & Filter [ajax-search-lite] < 4.11.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 4.11.1
|
4.11.1 |
2023-04-03 |
—
|
CVE-2023-1420
The Ajax Search Lite plugin versions prior to 4.11.1 contain a cross-site scripting vulnerability that could allow an attacker to inject and execute malicious scripts on the website. These injected scripts could perform actions such as redirecting users, displaying unwanted advertisements, or executing arbitrary HTML code when visitors access the site. The vulnerability was discovered by Erwan LR and has been resolved starting with version 4.11.1, which users should upgrade to immediately.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings