Smart Docs
Monthly
Stored cross-site scripting in the Smart Docs WordPress plugin allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts via the 'smartdocs_search' shortcode. Versions up to and including 1.1.0 are affected. No public exploit has been identified at the time of analysis, and the EPSS exploitation probability is low (0.03%), reducing immediate risk.
Stored cross-site scripting in the Smart Docs WordPress plugin allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts via the 'smartdocs_search' shortcode. Versions up to and including 1.1.0 are affected. No public exploit has been identified at the time of analysis, and the EPSS exploitation probability is low (0.03%), reducing immediate risk.