Medium · 5.9 CVE-2023-31228 EUVD-2023-35543GHSA-gxcc-9qq4-8xhr

WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Published Aug 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.0 versions.

Vendor	Product	Affected	Fixed
CreativeMindsSolutions	CM On Demand Search And Replace	≤ 1.3.0	—