Skip to content
OpenAdvisories
Unscored CVE-2022-0626 EUVD-2022-15723GHSA-v4mp-q59f-qwcc

Advanced Admin Search < 1.1.6 - Reflected Cross-Site Scripting

Published Jun 13, 2022 · Updated Aug 2, 2024 · Assigned by WPScan

Description

The Advanced Admin Search WordPress plugin before 1.1.6 does not sanitize and escape some parameters before outputting them back in an admin page, leading to a Reflected Cross-Site Scripting.

Affected products

VendorProductAffectedFixed
— Advanced Admin Search 1.1.6 – < 1.1.6 1.1.6

References