CVE-2024-21752
WordPress Ajax Search Lite Plugin <= 4.11.4 is vulnerable to Cross Site Scripting (XSS)
Cross-Site Request Forgery (CSRF) vulnerability in Ernest Marcinko Ajax Search Lite allows Reflected XSS.This issue affects Ajax Search Lite: from n/a through 4.11.4.
We have discovered 850 live websites that are affected by CVE-2024-21752.
Affected Software
| Product |  Ajax Search Lite |
| Category | Wordpress Plugins |
| Vulnerable Versions |
|
| Total Vulnerable Versions | 47 |
| Vulnerable Domains | 850 live websites (98.04% of Ajax Search Lite install base) |
Details
- Published - Feb 29, 2024
- Updated - Feb 29, 2024
Credits
- Le Ngoc Anh (Patchstack Alliance) (finder)
CWE
CVE References
CWE References
Countries
 United States | 179 websites |
 Russia | 89 websites |
 France | 67 websites |
 Germany | 66 websites |
 Italy | 47 websites |
 GB | 37 websites |
 Spain | 31 websites |
 Poland | 25 websites |
 Netherlands | 20 websites |
 Brazil | 20 websites |
TLDs
| .com | 286 websites |
| .ru | 82 websites |
| .org | 48 websites |
| .de | 41 websites |
| .fr | 36 websites |
| .pl | 21 websites |
| .it | 21 websites |
| .co.uk | 16 websites |
| .es | 15 websites |
| .ca | 13 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redWebsites affected by CVE-2024-21752
Top websites that are affected by CVE-2024-21752. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ***.******.at |  Austria | *,*** | |
| *********.com | Netherlands | **,*** | |
| **********.com | United States | **,*** | |
| ***.***.**.ca |  Canada | **,*** | |
| **********.com | Canada | **,*** | |
| ***.***********.com |  Mexico | **,*** | |
| *************.eu | Germany | **,*** | |
| ******.ru | Russia | **,*** | |
| ***********.com | United States | **,*** | |
| ***.*****************.org | Italy | ***,*** |