CVE-2022-3539

The Testimonials WordPress plugin before 2.7, super-testimonial-pro WordPress plugin before 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2022-22793

Name of the Vulnerable Software and Affected Versions Testimonials WordPress plugin versions prior to 2.7 super-testimonial-pro WordPress plugin versions prior to 1.0.8 Description The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks, even when the...

CVE-2022-3539

The CVE-2022-3539 issue affects the WordPress plugins Testimonials (before 2.7) and Super Testimonial Pro (before 1.0.8). The root cause is a lack of sanitization and escaping of plugin settings, enabling high-privilege users (e.g., admins) to perform cross-site scripting (XSS) even when the unfi...

WordPress David Anderson Testimonial Slider Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2022-44741

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

CVE-2022-44741

CVE-2022-44741 affects the WordPress plugin David Anderson Testimonial Slider

CVE-2022-44741 WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

PT-2022-27293 · WordPress · David Anderson Testimonial Slider

Name of the Vulnerable Software and Affected Versions: David Anderson Testimonial Slider plugin version 1.3.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that can lead to Cross-Site Scripting XSS. Recommendations: For David Anderson Testimonial...

CVE-2022-44741

Cross-Site Request Forgery CSRF vulnerability leading to Cross-Site Scripting XSS in David Anderson Testimonial Slider plugin = 1.3.1 on WordPress...

Testimonial Slider <= 1.3.1 - Stored XSS via CSRF

The plugin does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by ptsfence Patchstack Alliance in WordPress Testimonial Slider plugin versions = 1.3.1. Solution No patched version is available. No reply from the vendor...

WordPress GS Testimonial Slider plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2022-40213

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in GS Testimonial Slider plugin = 1.9.6 at WordPress...

CVE-2022-40213

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in GS Testimonial Slider plugin = 1.9.6 at WordPress...

Cross site scripting

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in GS Testimonial Slider plugin = 1.9.6 at WordPress...

CVE-2022-40213

The CVE concerns the WordPress GS Testimonial Slider plugin with versions prior to 1.9.7, where multiple authenticated Stored Cross-Site Scripting (XSS) vulnerabilities exist due to insufficient input filtering/escaping. An attacker with contributor+ privileges can inject scripts that are stored ...

CVE-2022-40213 WordPress GS Testimonial Slider plugin <= 1.9.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in GS Testimonial Slider plugin = 1.9.6 at WordPress...

WordPress plugin GS Testimonial Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2022-25286 · WordPress · Testimonial Slider

Name of the Vulnerable Software and Affected Versions: GS Testimonial Slider plugin versions prior to 1.9.7 Description: The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. This means that an attacker with contributor or higher privileges can inject maliciou...