WordPress Strong Testimonials plugin <= 2.40.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Jinson Varghese Behanan in WordPress Strong Testimonials plugin versions = 2.40.0. Solution Update the WordPress Strong Testimonials plugin to the latest available version at least 2.40.1...

Strong Testimonials < 2.40.1 - Stored Cross Site Scripting (XSS)

Multiple stored XSS vulnerabilities found in popular WordPress testimonial plugin, Strong Testimonials. First reported to the Strong Testimonials team on 23rd January 2020...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

CVE-2013-4241

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

CVE-2013-4241

CVE-2013-4241 (HMS Testimonials plugin for WordPress) : The NVD and related records describe multiple XSS vulnerabilities in the HMS Testimonials plugin for WordPress, fixed in versions before 2.0.11. The affected vectors include the Testimonial form fields (name, image, url, testimonial) and sev...

CVE-2013-4241: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

WordPress bws-testimonials plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress bws-testimonials plugin. An attacker can exploit...

CVE-2017-18558

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

Cross site scripting

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

CVE-2017-18558

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

CVE-2017-18558

CVE-2017-18558 affects the WordPress plugin bws-testimonials, version before 0.1.9. The connected Nuclei/WPVuln/Red Hat et al. entries confirm multiple XSS flaws in this plugin, caused by inadequate input/output sanitization, enabling authenticated attackers to inject and execute arbitrary JavaSc...

CVE-2017-18558: Improper Neutralization of Input During Web Page Generation

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

WordPress Easy Testimonials Cross Site Scripting

A XSS injection vulnerability exists in WordPress Easy Testimonials Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2018-19564

Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters ikcfclient and ikcfposition and ikcfother have Cross-Site Scripting...

CVE-2018-19564

Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters ikcfclient and ikcfposition and ikcfother have Cross-Site Scripting...

Cross site scripting

Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters ikcfclient and ikcfposition and ikcfother have Cross-Site Scripting...

CVE-2018-19564

The CVE-2018-19564 entry describes a Stored XSS in the WordPress plugin Easy Testimonials (version 3.2). The vulnerability is triggered via three wp-admin/post.php parameters: _ikcf_client, _ikcf_position, and _ikcf_other, enabling Cross-Site Scripting in the admin context. Public references incl...

CVE-2018-19564

Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters ikcfclient and ikcfposition and ikcfother have Cross-Site Scripting...

Wordpress Easy Testimonials 3.2 Plugins - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugins Easy Testimonials 3.2 - Cross-Site Scripting Exploit Author: Endust Vendor Homepage: https://wordpress.org/plugins/easy-testimonials/ Software Link: https://wordpress.org/plugins/easy-testimonials/ Version: 3.2...

CVE-2018-19564: Improper Neutralization of Input During Web Page Generation

Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters ikcfclient and ikcfposition and ikcfother have Cross-Site Scripting...