Description
The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the highlights functionality in all versions up to, and including, 4.24.3 (Free) and <= 2.27.4 (Premium), due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page via the search results.
Problem types
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Product status
Any version
Any version
Timeline
| 2025-04-20: | Discovered |
| 2025-05-06: | Disclosed |
Credits
Jack Taylor
References
www.wordfence.com/...-f142-4859-a941-0fbde6ef7fdb?source=cve
plugins.trac.wordpress.org/....3/lib/excerpts-highlights.php
plugins.trac.wordpress.org/....3/lib/excerpts-highlights.php
www.relevanssi.com/...relevanssi-and-adjusting-the-settings/
plugins.trac.wordpress.org/changeset/3283795/