The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue
CPE | Name | Operator | Version |
---|---|---|---|
car_repair_services_\\&_auto_mechanic | lt | 4.0 |