Vulnerabilities > Catchplugins > Catch Breadcrumb > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-04-23 CVE-2020-12054 Cross-site Scripting vulnerability in Catchplugins Catch Breadcrumb
The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query).
network
low complexity
catchplugins CWE-79
6.1