2 matches found
CVE-2017-12131: Improper Neutralization of Input During Web Page Generation
The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens...
6.1CVSS5.8AI score0.0078EPSS
SaveExploits1References2
PT-2017-12356
Name of the Vulnerable Software and Affected Versions Easy Testimonials plugin version 3.0.4 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is demonstrated through the Default Testimonials Width, View More Testimonials Link, and Testimonial...
6.1CVSS0.0078EPSS
SaveExploits1References3
20