CVE-2022-4648

creationtimestamp| type| source ---|---|--- 2023-01-16 18:24:26+00:00| seen| https://t.me/cibsecurity/56550...

CVE-2022-4648 Real Testimonials < 2.6.0 - Contributor+ Stored XSS

The Real Testimonials WordPress plugin before 2.6.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4648

CVE-2022-4648 affects the Real Testimonials WordPress plugin prior to 2.6.0. The vulnerability arises because the plugin does not validate and escape certain shortcode attributes before output, enabling Stored Cross-Site Scripting that can-impact high-privilege users (admins) when exploited by us...