Not rated
CVE-2022-1047 The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL…
Description
The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| themify-ptb-search 1.4 | earliest → < 1.4.0 | 1.4.0 |