CVE-2024-3261

The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. The attack requires a specific...

CVE-2024-3261 Strong Testimonials < 3.1.12 - Contributor+ Stored XSS

The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. The attack requires a specific...

CVE-2024-3261: Improper Neutralization of Input During Web Page Generation

The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. The attack requires a specific...

PT-2024-24727 · WordPress · Strong Testimonials

Name of the Vulnerable Software and Affected Versions: Strong Testimonials WordPress plugin versions prior to 3.1.12 Description: The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some Testimonia...

PT-2021-16113

Name of the Vulnerable Software and Affected Versions Testimonial WordPress plugin versions prior to 1.6.0 Description The issue allows high privilege users to perform Cross Site Scripting attacks due to unescaped testimonial fields, even when the unfiltered html capability is disallowed...