CVE-2022-1047 – Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2022-1047

The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability. El plugin Themify Post Type Builder Search Addon de WordPress versiones anteriores a 1.4.0, no escapa correctamente la URL de la página actual antes de reusarla en un atributo HTML, conllevando a una vulnerabilidad de tipo cross site scripting reflejado • https://wpscan.com/vulnerability/078bd5f6-64f7-4665-825b-9fd0c2b7b91b • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •