CVE-2026-15245

The BNE Testimonials WordPress plugin, prior to version 2.0.8.2, is vulnerable due to failing to properly escape a shortcode attribute in a JavaScript context before echoing it into an inline script. This allows users with the contributor role or higher to inject arbitrary JavaScript that execute...