Description
The URL parameters accepted by forum search were not limited to the allowed parameters.
Remediation
References
Related Vulnerabilities
WordPress Plugin Login With Ajax Cross-Site Scripting (3.1.6)
WordPress Plugin Contact Form Clean and Simple Cross-Site Scripting (4.7.0)
WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.17)
Drupal Improper Authentication Vulnerability (CVE-2006-1228)
ProjectSend Incorrect Authorization Vulnerability (CVE-2021-40884)