3 matches found
CVE-2020-26672
Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting XSS in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database...
PT-2020-16483
Name of the Vulnerable Software and Affected Versions Testimonial Rotator Wordpress Plugin version 3.0.2 Description The issue concerns a Cross Site Scripting XSS problem. Specifically, it involves the /wp-admin/post.php endpoint. If a user intercepts a request and inserts a payload in the cite...
CVE-2020-26672: Improper Neutralization of Input During Web Page Generation
Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting XSS in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database...