aicwebtech/Bible-SuperSearch-WordPress-Plugin

aicwebtech/Bible-SuperSearch-WordPress-Plugin

GitHubGitHub
GitHubgithub.com
Releases1
Frequency
Last Release
Stars1
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-8064↗
6.4 MEDIUM—

The Bible SuperSearch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘selector_height’ parameter in all versions up to, and including, 6.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.