CVE-2022-4717

The CVE-2022-4717 entry concerns the WordPress plugin Strong Testimonials prior to version 3.0.3. The vulnerability stems from not validating/escaping certain shortcode attributes, enabling Stored XSS that could be exploited by a user with Contributor privileges to impact high-privilege users (e....

CVE-2022-4717 Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode

The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4717 Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode

The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

WordPress plugin Strong Testimonials 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogging sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

Wordpress Strong Testimonials 2.40.1 Plugin - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Strong Testimonials 2.40.0 - Persistent Cross-Site Scripting Vendor Homepage: https://strongtestimonials.com Vendor Changelog: https://github.com/MachoThemes/strong-testimonials/blob/master/changelog.txt Exploit...

Wordpress Plugin Strong Testimonials 2.40.1 - Persistent Cross-Site Scripting

Wordpress Plugin Strong Testimonials 2.40.1 - Persistent Cross-Site Scripting Exploit Title: Wordpress Plugin Strong Testimonials 2.40.0 - Persistent Cross-Site Scripting Date: 2020-01-23 Vendor Homepage: https://strongtestimonials.com Vendor Changelog:...

WordPress Strong Testimonials 2.40.1 Cross Site Scripting

Exploit Title: Wordpress Plugin Strong Testimonials 2.40.0 - Persistent Cross-Site Scripting Date: 2020-01-23 Vendor Homepage: https://strongtestimonials.com Vendor Changelog: https://github.com/MachoThemes/strong-testimonials/blob/master/changelog.txt Exploit Author: Jinson Varghese Behanan Auth...

WordPress Strong Testimonials Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Strong Testimonials versions prior to 2.40.1. The...

CVE-2020-8549

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens...

CVE-2020-8549

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens...

Cross site scripting

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens...

CVE-2020-8549

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens...

CVE-2020-8549

The CVE-2020-8549 entry concerns the WordPress Strong Testimonials plugin, prior to version 2.40.1. The vulnerability is a stored XSS in the plugin (notably via client_name and company_name in the client details UI) that can lead to an attacker executing malicious actions, including stealing sess...

PT-2020-20202 · WordPress · Strong Testimonials

Name of the Vulnerable Software and Affected Versions: Strong Testimonials plugin versions prior to 2.40.1 Description: The issue allows an attacker to perform malicious actions, such as stealing session tokens, by exploiting a Stored XSS vulnerability in the Strong Testimonials plugin for...

WordPress Strong Testimonials plugin <= 2.40.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Jinson Varghese Behanan in WordPress Strong Testimonials plugin versions = 2.40.0. Solution Update the WordPress Strong Testimonials plugin to the latest available version at least 2.40.1...

Strong Testimonials < 2.40.1 - Stored Cross Site Scripting (XSS)

Multiple stored XSS vulnerabilities found in popular WordPress testimonial plugin, Strong Testimonials. First reported to the Strong Testimonials team on 23rd January 2020...

WordPress Strong Testimonials plugin <= 2.31.4 - Multiple Authenticated Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Cross-Site Scripting XSS vulnerabilities found by DefenseCode in WordPress Strong Testimonials plugin versions = 2.31.4. Solution Update the WordPress Strong Testimonials plugin to the latest available version at least 2.31.5...

WordPress Strong Testimonials 2.31.4 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Advisory Title: WordPress Strong Testimonials Plugin Multiple XSS Vulnerabilities Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Strong Testimonials plugin Language: PHP Version: 2.31.4 and below Vendor Status:...

WordPress Strong Testimonials Plugin Has Multiple Cross-Site Scripting Vulnerabilities

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Multiple cross-site scripting vulnerabilities exist in the WordPress Strong Testimonials plugin, which can be exploited by an...