EUVD-2021-23433

Malware in sbrugna...

CVE-2021-36857

Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in wpshopmart Testimonial Builder plugin = 1.6.1 at WordPress...

CVE-2021-36857 WordPress Testimonial Builder plugin <= 1.6.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in wpshopmart Testimonial Builder plugin = 1.6.1 at WordPress...

CVE-2021-36857

The CVE-2021-36857 entry concerns the WordPress plugin “Testimonial Builder” (versions up to 1.6.1). It describes an Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WordPress that arises from insufficient sanitisation/escaping of settings, enabling a high-privilege user...

CVE-2021-36857 WordPress Testimonial Builder plugin <= 1.6.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in wpshopmart Testimonial Builder plugin = 1.6.1 at WordPress...

WordPress plugin wpshopmart Testimonial Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...

CVE-2021-24598 Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting

The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress Testimonial Builder plugin <= 1.6.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Testimonial Builder plugin versions = 1.6.1. Solution Update the WordPress Testimonial plugin to the latest available version at least 1.6.2...

Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting

The plugin does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC As admin, create/edit a testimonial and put the following payload in the Testimonial User Name field: "...

Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting

The plugin does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfilteredhtml capability is disallowed As admin, create/edit a testimonial and put the following payload in the Testimonial User Name field: "...