2 matches found
CVE-2022-23912
The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not sanitise and escape the id parameter before outputting it back in an attribute, leading to a Reflected cross-Site Scripting...
6.1CVSS0.00866EPSS
SaveExploits2References2
Cross site scripting
The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not sanitise and escape the id parameter before outputting it back in an attribute, leading to a Reflected cross-Site Scripting...
4.3CVSS6.1AI score0.00866EPSS
SaveExploits2References2Affected Software1
20