CVE-2008-0837

John Godley Search Unleashed - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not properly handled when the administrator views the log file.

References (6)

Scores

EPSS 0.0044
EPSS Percentile 62.8%

Classification

CWE
CWE-79
Status draft

Affected Products (2)

john_godley/search_unleashed
wordpress/search_unleashed_plugin

Timeline

Published Feb 20, 2008
Tracked Since Feb 18, 2026