Lucene search

[email protected]NVD:CVE-2021-36857

HistoryAug 22, 2022 - 3:15 p.m.

CVE-2021-36857

2022-08-2215:15:13

CWE-79

[email protected]

web.nvd.nist.gov

xss vulnerability

authenticated

wordpress

plugin

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

19.4%

JSON

Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6.1 at WordPress.

Affected configurations

Nvd

Node

wpshopmarttestimonial_builderRange<1.6.2wordpress

VendorProductVersionCPE
wpshopmarttestimonial_builder*cpe:2.3:a:wpshopmart:testimonial_builder:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
wpshopmart	testimonial_builder	*	cpe:2.3:a:wpshopmart:testimonial_builder::::::wordpress::*

References

patchstack.com/database/vulnerability/testimonial-builder/wordpress-testimonial-builder-plugin-1-6-1-authenticated-stored-cross-site-scripting-xss-vulnerability

wordpress.org/plugins/testimonial-builder/#developers