Lucene search
HistoryApr 15, 2024 - 5:15 a.m.
CVE-2024-1746
testimonial slider
wordpress
plugin
security
cross-site scripting
cve-2024-1746
privilege
admin
stored
settings
sanitise
escape
unfiltered_html
capability
multisite
The Testimonial Slider WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Related
cvelist
cvelist
CVE-2024-1746 Testimonial Slider < 2.3.8 - Admin+ Stored XSS
2024-04-15 05:00:04
wpexploit
wpexploit
Testimonial Slider < 2.3.8 - Admin+ Stored XSS
2024-03-25 00:00:00
vulnrichment
vulnrichment
CVE-2024-1746 Testimonial Slider < 2.3.8 - Admin+ Stored XSS
2024-04-15 05:00:04
wpvulndb
wpvulndb
Testimonial Slider < 2.3.8 - Admin+ Stored XSS
2024-03-25 00:00:00
Testimonial Slider < 2.3.8 - Admin+ Stored Cross-Site Scripting
2024-04-25 00:00:00
cve
cve
CVE-2024-1746
2024-04-15 05:15:14
wordfence
wordfence