Description
(CVE-2025-5209) Ivory Search插件未正确过滤设置导致跨站脚本漏洞
(CVE-2025-5209) Ivory Search插件未正确过滤设置导致跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://wpscan.com/vulnerability/8b51dc46-62c8-45b5-96ce-fb774b430388/
https://www.cve.org/CVERecord?id=CVE-2025-5209
https://github.com/advisories/GHSA-5j6c-8mh7-5662
https://patchstack.com/database/wordpress/plugin/add-search-to-menu/vulnerability/wordpress-ivory-search-plugin-5-5-10-admin-stored-xss-vulnerability
https://hossted.com/knowledge-base/newsflash/business-and-enterprise-solutions/cms/wordpress-cross-site-scripting-vulnerability-in-ivory-search-plugin/
https://nvd.nist.gov/vuln/detail/CVE-2025-5209