CVE-2026-1053 | Ivory Search Plugin up to 5.5.13 on WordPress Setting menu_gcse/nothing_found_text cross site scripting

A vulnerability, which was classified as problematic, has been found in Ivory Search Plugin up to 5.5.13 on WordPress. This issue affects some unknown processing of the component Setting Handler. The manipulation of the argument menu_gcse/nothing_found_text leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-1053. The attack is possible to be carried out remotely. No exploit exists.