26 matches found
WordPress BNE Testimonials plugin < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode vulnerability
Contributor+ Stored XSS via Slider Shortcode vulnerability discovered by testoun in WordPress Plugin BNE Testimonials versions 2.0.8.2...
CVE-2026-15245
The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript context before echoing it into an inline script, allowing users with the contributor role and above to inject arbitrary JavaScript that executes in the browser of anyone viewing th...
CVE-2026-15245 BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode
The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript context before echoing it into an inline script, allowing users with the contributor role and above to inject arbitrary JavaScript that executes in the browser of anyone viewing th...
CVE-2026-15245
The BNE Testimonials WordPress plugin, in versions before 2.0.8.2 , is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the plugin fails to properly escape a shortcode attribute for a JavaScript context before echoing it into an inline script. This allows users with contr...
CVE-2026-15245 BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode
The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript context before echoing it into an inline script, allowing users with the contributor role and above to inject arbitrary JavaScript that executes in the browser of anyone viewing th...
CVE-2026-15245
The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript context before echoing it into an inline script, allowing users with the contributor role and above to inject arbitrary JavaScript that executes in the browser of anyone viewing th...
CVE-2026-15245: Improper Neutralization of Input During Web Page Generation
The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript context before echoing it into an inline script, allowing users with the contributor role and above to inject arbitrary JavaScript that executes in the browser of anyone viewing th...
EUVD-2025-210361
Contributor Cross Site Scripting XSS in BNE Testimonials = 2.0.8 versions...
CVE-2025-68075
Contributor Cross Site Scripting XSS in BNE Testimonials = 2.0.8 versions...
CVE-2025-68075 WordPress BNE Testimonials plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in BNE Testimonials = 2.0.8 versions...
CVE-2025-68075 WordPress BNE Testimonials plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in BNE Testimonials = 2.0.8 versions...
CVE-2025-68075
CVE-2025-68075 describes a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress plugin BNE Testimonials (versions ≤ 2.0.8). The CVSS 3.1 base metrics are provided (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) with a base score of 6.5 (Medium). Connected sources confirm the affected produ...
WordPress BNE Testimonials plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin BNE Testimonials versions = 2.0.8...
PT-2026-52719
Name of the Vulnerable Software and Affected Versions BNE Testimonials versions prior to 2.0.9 Description Cross Site Scripting XSS exists in the software, allowing a user with contributor privileges to execute malicious scripts in the browser of other users. Recommendations Update to a version...
CVE-2025-68075: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in BNE Testimonials = 2.0.8 versions...
EUVD-2023-28467
Malicious code in bioql PyPI...
CVE-2023-24411
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Kerry Kline BNE Testimonials plugin = 2.0.7 versions...
CVE-2023-24411
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Kerry Kline BNE Testimonials plugin = 2.0.7 versions...
