CVE-2024-21752

Description

References

• patchstack.com/database/vulnerability/ajax-search-lite/wordpress-ajax-search-lite-plugin-4-11-4-reflected-xss-via-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Autres vulnérabilités de ajax search

• CVE-2024-8619MOYENNE 4.8The Ajax Search Lite WordPress plugin before 4.12.3 does not sanitise and escape some of its settings, which could allow high privilege use…
• CVE-2024-13585FAIBLE 3.5The Ajax Search Lite WordPress plugin before 4.12.5 does not sanitise and escape some of its settings, which could allow high privilege use…
• CVE-2024-10568MOYENNE 4.7The Ajax Search Lite WordPress plugin before 4.12.4 does not sanitise and escape some of its settings, which could allow high privilege use…
• CVE-2024-7084MOYENNE 4.8The Ajax Search Lite WordPress plugin before 4.12.1 does not sanitise and escape some parameters, which could allow users with a role as low…
• CVE-2023-1435MOYENNE 6.1The Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape various parameters before outputting them back in pages, lea…