← Back

Simple Sort&search

simple_sort&search

Vendor: Yukimichi • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24433
1Yukimichi
1Simple Sort&search
Jun 17, 2026
Jan 16, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The simple sort&search WordPress plugin through 0.0.3 does not make sure that the indexurl parameter of the shortcodes "category_sims", "order_sims", "orderby_sims", "period_sims", and "tag_sims" use allowed URL protocol...Show more
The simple sort&search WordPress plugin through 0.0.3 does not make sure that the indexurl parameter of the shortcodes "category_sims", "order_sims", "orderby_sims", "period_sims", and "tag_sims" use allowed URL protocols, which can lead to stored cross-site scripting by users with a role as low as ContributorShow less