Car Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 3.9%
exploitation probability
3.9%top 11% of all CVEs
observed exploitation
nono source reports it
The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue
Affected products
Unknown · Car Repair Services & Auto Mechanic