CVE-2022-2094: Yellowyard Yellow Yard Searchbar

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting

Affected products

• Yellowyard Yellow Yard Searchbar: before 2.8.2 (fixed in 2.8.2)

Published 2023-02-08. Last modified 2026-06-17.