Lucene search
Ngo Van Thien (Alliance project)PATCHSTACK:7120364F8F117CF4110E6D01C884E59FHistoryOct 27, 2022 - 12:00 a.m.
WordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
2022-10-2700:00:00
Ngo Van Thien (Alliance project)
patchstack.com
11
wordpress
testimonials
plugin
cross-site scripting
vulnerability
update
patchstack alliance
0.001 Low
EPSS
Percentile
19.5%
Auth. Stored Cross-Site Scripting (XSS) vulnerability discovered by Ngo Van Thien (Patchstack Alliance) in WordPress Testimonials plugin (versions <= 2.6).
Solution
Update the WordPress Testimonials plugin to the latest available version (at least 2.7).
| CPE | Name | Operator | Version |
|---|---|---|---|
| testimonials | le | 2.6 |
Related
cve
cve
CVE-2021-36858
2022-10-28 16:15:13
cvelist
cvelist
prion
prion
Cross site scripting
2022-10-28 16:15:00
nvd
nvd
CVE-2021-36858
2022-10-28 16:15:13