漏洞描述
Nova Lite before 1.3.9 for WordPress is susceptible to reflected cross-site scripting via search.php.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wpscan.comhttps://wpscan.com/vulnerability/30a83491-2f59-4c41-98bd-a9e6e5a609d4↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-17362↗themes.trac.wordpress.orghttps://themes.trac.wordpress.org/browser/nova-lite/1.3.9/readme.txt?rev=134076↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗