Search Unleashed <= 0.2.10 - Cross-Site Scripting
mediumCross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file.
- CVSS:
- 6.1
- Affected:
- up to 0.2.10
- Fixed in:
- 0.2.11
- Disclosed:
- Feb 14, 2008