CVE-2021-24346

Name of the Vulnerable Software and Affected Versions Stock in & out WordPress plugin versions 1.0.0 through 1.0.4

Description The issue concerns a reflected XSS problem due to the lack of validation, sanitization, or escaping of the srch POST parameter in the search functionality. This functionality is accessible to contributors, which is the lowest accessible level.

Recommendations For Stock in & out WordPress plugin versions 1.0.0 through 1.0.4, consider disabling the search functionality until a patch is available to prevent exploitation of the reflected XSS issue. Restrict access to the contributor level to minimize the risk of exploitation. Avoid using the srch parameter in the affected endpoint until the issue is resolved.