EUVD-2021-23433

Malware in sbrugna...

CVE-2021-36857

Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in wpshopmart Testimonial Builder plugin = 1.6.1 at WordPress...

CVE-2021-36857 WordPress Testimonial Builder plugin <= 1.6.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in wpshopmart Testimonial Builder plugin = 1.6.1 at WordPress...

CVE-2021-36857 WordPress Testimonial Builder plugin <= 1.6.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in wpshopmart Testimonial Builder plugin = 1.6.1 at WordPress...

CVE-2021-36857

The CVE-2021-36857 entry concerns the WordPress plugin “Testimonial Builder” (versions up to 1.6.1). It describes an Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WordPress that arises from insufficient sanitisation/escaping of settings, enabling a high-privilege user...

CVE-2021-36857

Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in wpshopmart Testimonial Builder plugin = 1.6.1 at WordPress...

WordPress plugin WPShopMart Testimonial Builder: Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site scripting...

PT-2022-10581

Name of the Vulnerable Software and Affected Versions wpshopmart Testimonial Builder plugin versions 1.6.1 and earlier Description The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by an authenticated user with editor or...

CVE-2021-36857: Improper Neutralization of Input During Web Page Generation

Authenticated editor+ Stored Cross-Site Scripting XSS vulnerability in wpshopmart Testimonial Builder plugin = 1.6.1 at WordPress...

CVE-2021-24598 Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting

The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfilteredhtml capability is disallowed...

WordPress Testimonial Builder plugin <= 1.6.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ngo Van Thien Patchstack Alliance in WordPress Testimonial Builder plugin versions = 1.6.1. Solution Update the WordPress Testimonial plugin to the latest available version at least 1.6.2...

Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting

The plugin does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfilteredhtml capability is disallowed As admin, create/edit a testimonial and put the following payload in the Testimonial User Name field: "...

Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting

The plugin does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfilteredhtml capability is disallowed PoC As admin, create/edit a testimonial and put the following payload in the Testimonial User Name field: "...