Description
The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it in the page, leading to reflected Cross-Site Scripting issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Advanced AJAX Product Filters | < 1.5.4.7 | 1.5.4.7 |
References
- https://wpscan.com/vulnerability/b92ec5f7-d6a8-476f-a01e-21001a558914/ exploit vdb-entry technical-description