Lucene search
+L

23 matches found

Nuclei
Nuclei
•added 2026/09/28 2:13 a.m.•45 views

Aajoda Testimonials < 2.2.2 - Cross-Site Scripting

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. id: CVE-2023-2178 info: name: Aajoda Testimonials...

4.8CVSS6.2AI score0.00773EPSS
SaveExploits2References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-45449

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00239EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:26 a.m.•19 views

CVE-2024-51614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:51 a.m.•15 views

CVE-2023-2178

The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.6AI score0.00773EPSS
SaveExploits2References1
NVD
NVD
•added 2024/11/09 2:15 p.m.•31 views

CVE-2024-51614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/09 2:04 p.m.•14 views

CVE-2024-51614 WordPress Aajoda Testimonials plugin <= 2.2.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/09 2:04 p.m.•56 views

CVE-2024-51614 WordPress Aajoda Testimonials plugin <= 2.2.2 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS0.00239EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/09 2:04 p.m.•62 views

CVE-2024-51614

CVE-2024-51614 affects WordPress plugin “Aajoda Testimonials” (

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•1 views

CVE-2024-51614: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a through = 2.2.2...

6.5CVSS5.8AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/09 12:00 a.m.•26 views

PT-2024-34757 · Unknown · Aajoda Testimonials

Name of the Vulnerable Software and Affected Versions: Aajoda Testimonials versions n/a through 2.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS in Aajoda Testimonials...

6.5CVSS5.8AI score0.00239EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/11/09 12:00 a.m.•13 views

WordPress plugin Aajoda Testimonials 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00239EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/10/31 2:54 p.m.•9 views

WordPress Aajoda Testimonials plugin <= 2.2.2 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Aajoda Testimonials versions = 2.2.2...

6.5CVSS5.8AI score0.00239EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/10/31 12:00 a.m.•18 views

WordPress Aajoda Testimonials Plugin <= 2.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Aajoda Testimonials Type Plugin Vulnerable versions = 2.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51614 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 68d3e8f6dba1 Credits SOPROBRO Required privilege...

6.5CVSS6.5AI score0.00239EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/01 12:00 a.m.•13 views

The vulnerability of the Aajoda Testimonials plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Aajoda Testimonials plugin for WordPress content management systems is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

4.8CVSS6.3AI score0.00773EPSS
SaveExploits2References2Affected Software1
OSV
OSV
•added 2023/06/27 2:15 p.m.•16 views

CVE-2023-2178

The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS7.3AI score0.00773EPSS
SaveExploits2References1
NVD
NVD
•added 2023/06/27 2:15 p.m.•27 views

CVE-2023-2178

The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS4.7AI score0.00773EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2023/06/27 1:17 p.m.•26 views

CVE-2023-2178 Aajoda Testimonials < 2.2.2 - Admin+ Stored XSS

The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.6AI score0.00773EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2023/06/27 1:17 p.m.•47 views

CVE-2023-2178 Aajoda Testimonials < 2.2.2 - Admin+ Stored XSS

The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.9AI score0.00773EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2023/06/27 12:00 a.m.•12 views

WordPress plugin Aajoda Testimonials 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS6.3AI score0.00773EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/27 12:00 a.m.•1 views

CVE-2023-2178: Undefined Security Weakness

The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS6.2AI score0.00773EPSS
SaveExploits2References2
Rows per page
Query Builder