Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-26672
HistoryOct 16, 2020 - 3:15 p.m.

Cross site scripting

2020-10-1615:15:00
PRIOn knowledge base
www.prio-n.com
1

0.001 Low

EPSS

Percentile

25.0%

Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. If a user intercepts a request and inserts a payload in “cite” parameter, the payload will be stored in the database.

CPENameOperatorVersion
testimonial_rotatorlt3.0.3

0.001 Low

EPSS

Percentile

25.0%