4 matches found
CVE-2018-19564
Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters ikcfclient and ikcfposition and ikcfother have Cross-Site Scripting...
6.1CVSS6AI score0.00932EPSS
SaveExploits1References1
CVE-2018-19564
Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters ikcfclient and ikcfposition and ikcfother have Cross-Site Scripting...
6.1CVSS6AI score0.00932EPSS
SaveExploits1References1
CVE-2018-19564
The CVE-2018-19564 entry describes a Stored XSS in the WordPress plugin Easy Testimonials (version 3.2). The vulnerability is triggered via three wp-admin/post.php parameters: _ikcf_client, _ikcf_position, and _ikcf_other, enabling Cross-Site Scripting in the admin context. Public references incl...
6.1CVSS5.9AI score0.00932EPSS
SaveExploits1References1Affected Software1
20