Input validation vulnerability in XiSearch bar 2.6

The plugin called XiSearch bar, used for WordPress websites, has a security issue that allows unauthorized individuals to make changes to the settings and inject harmful code. This is because the plugin does not properly check for a security code when accessing the ‘xisearch-key-config’ page. Attackers can take advantage of this vulnerability by tricking a website administrator into clicking on a link, which gives them the ability to make changes and insert malicious scripts.