CVE-2024-7084
Ajax Search Lite < 4.12.1 - Admin+ Stored XSS
The Ajax Search Lite WordPress plugin before 4.12.1 does not sanitise and escape some parameters, which could allow users with a role as low as Admin+ to perform Cross-Site Scripting attacks.
CVSS 3.1 · 4.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products