Lucene search
PRIOn knowledge basePRION:CVE-2023-4795HistoryOct 16, 2023 - 8:15 p.m.
Cross site scripting
2023-10-1620:15:00
PRIOn knowledge base
www.prio-n.com
5
cross site scripting
testimonial slider
wordpress
plugin
stored xss
security vulnerability
nvd
0.0004 Low
EPSS
Percentile
14.2%
The Testimonial Slider Shortcode WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| testimonial_slider_shortcode | lt | 1.1.9 |
Related
nvd
nvd
CVE-2023-4795
2023-10-16 20:15:16
wpvulndb
wpvulndb
Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS
2023-09-25 00:00:00
cvelist
cvelist
CVE-2023-4795 Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS
2023-10-16 19:39:03
wpexploit
wpexploit
Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS
2023-09-25 00:00:00
cve
cve
CVE-2023-4795
2023-10-16 20:15:16