Security Advisory

CVE-2022-1047

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-05-09 16:50:44
Last updated 2024-08-02 23:47:43
Assigner WPScan
CVSS score not scored
State PUBLISHED

Description

The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.