High · 7.1 CVE-2024-49238 EUVD-2024-43307GHSA-r8rv-v4v5-92v4

WordPress ADIF Log Search Widget plugin <= 1.0f - Reflected Cross Site Scripting (XSS) vulnerability

Published Oct 18, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: emka73 Product: ADIF Log Search Widget

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in emka73 ADIF Log Search Widget adif-log-search-widget allows Reflected XSS.This issue affects ADIF Log Search Widget: from n/a through <= 1.0f.

Affected products

Vendor	Product	Affected	Fixed
emka73	ADIF Log Search Widget	≤ 1.0f	—

References

https://patchstack.com/database/Wordpress/Plugin/adif-log-search-widget/vulnerability/wordpress-adif-log-search-widget-plugin-1-0f-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry