Skip to content
OpenAdvisories
High · 7.1 CVE-2025-31563 EUVD-2025-9437GHSA-hqqj-jcw8-c3rx

WordPress AI Search Bar plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability

Published Apr 1, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vimal Kava AI Search Bar open-ai-search-bar allows Stored XSS.This issue affects AI Search Bar: from n/a through <= 2.1.

Affected products

VendorProductAffectedFixed
Vimal Kava AI Search Bar ≤ 2.1 —

References