Log out
Get PRO

Latest

Input validation vulnerability in Custom Fields Search by BestWebSoft 1.3.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: April 12, 2017

The Custom Fields Search by BestWebSoft plugin for WordPress has a security vulnerability that can be exploited by unauthenticated attackers. If an attacker can get a user to click on a link, they can inject malicious web scripts into pages through the ‘category’ parameter in versions before 1.3.2. This is because the plugin does not properly sanitize the input and escape the output.

Detected in:

Custom Fields Search by BestWebSoft fixed vulnerable versions: >= * < 1.3.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.