Design/Logic Flaw

2020-06-2200:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

JSON

Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the wp-admin/post.php Client Name, Position, Web Address, Other, Location Reviewed, Product Reviewed, Item Reviewed, or Rating parameter.

CPENameOperatorVersion
easy_testimonialslt3.6

CPE	Name	Operator	Version
	easy_testimonials	lt	3.6

References

wpvulndb.com/vulnerabilities/10223