<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: searchiq</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-30867: Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in SearchIQ</title><link>https://patchthecve.com/cve/CVE-2025-30867.html</link><guid>https://patchthecve.com/cve/CVE-2025-30867.html</guid><pubDate>Wed, 17 Jun 2026 09:09:29 +0000</pubDate><description>MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in SearchIQ SearchIQ searchiq allows Stored XSS.This issue affects SearchIQ: from n/a through &lt;= 4.7.</description></item><item><title>CVE-2024-13350: The SearchIQ – The Search Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p</title><link>https://patchthecve.com/cve/CVE-2024-13350.html</link><guid>https://patchthecve.com/cve/CVE-2024-13350.html</guid><pubDate>Wed, 17 Jun 2026 07:01:50 +0000</pubDate><description>MEDIUM 6.4: The SearchIQ – The Search Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#x27;s &#x27;siq_searchbox&#x27; shortcode in all versions up to, and including, 4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for</description></item><item><title>CVE-2024-56229: Cross-Site Request Forgery (CSRF) vulnerability in SearchIQ SearchIQ searchiq.This issue affects SearchIQ: fro</title><link>https://patchthecve.com/cve/CVE-2024-56229.html</link><guid>https://patchthecve.com/cve/CVE-2024-56229.html</guid><pubDate>Wed, 17 Jun 2026 08:11:53 +0000</pubDate><description>MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in SearchIQ SearchIQ searchiq.This issue affects SearchIQ: from n/a through &lt;= 4.6.</description></item><item><title>CVE-2023-47832: Missing Authorization vulnerability in SearchIQ SearchIQ searchiq allows Exploiting Incorrectly Configured Acc</title><link>https://patchthecve.com/cve/CVE-2023-47832.html</link><guid>https://patchthecve.com/cve/CVE-2023-47832.html</guid><pubDate>Wed, 17 Jun 2026 06:33:22 +0000</pubDate><description>MEDIUM 5.3: Missing Authorization vulnerability in SearchIQ SearchIQ searchiq allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SearchIQ: from n/a through &lt;= 4.4.</description></item><item><title>CVE-2024-10885: The SearchIQ – The Search Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p</title><link>https://patchthecve.com/cve/CVE-2024-10885.html</link><guid>https://patchthecve.com/cve/CVE-2024-10885.html</guid><pubDate>Wed, 17 Jun 2026 06:56:37 +0000</pubDate><description>MEDIUM 6.4: The SearchIQ – The Search Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin&#x27;s &#x27;siq_searchbox&#x27; shortcode in all versions up to, and including, 4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for</description></item></channel></rss>