Approved changes feed: RSS · Atom

cpe:2.3:a:advance_search:advance_search:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdvance Search (73c975b2-b41b-56cc-a679-89d7747597a8)
ProductAdvance Search (2c0805c1-98e3-5ba7-bad2-233312b33dd1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38348 vulnerable 2026-06-08 05:32:55.940773 Advance Search <= 1.1.2 Reflected Cross-Site Scripting
MEDIUM (6.1)
The Advance Search WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the wpas_id parameter found in the ~/inc/admin/views/html-advance-search-admin-options.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1.2.
Published: 2021-09-10T13:32:38.774Z
Updated: 2025-05-02T19:53:39.565Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.