Advanced Admin Search <= 1.1.2 - Cross-Site Scripting
mediumThe Advanced Admin Search WordPress plugin through 1.1.2 does not sanitize and escape some parameters before outputting them back in an admin page, leading to Reflected Cross-Site Scripting.
- CVSS:
- 6.1
- Affected:
- up to 1.1.2
- Fixed in:
- 1.1.6
- Disclosed:
- May 17, 2022