Testimonial Slider <= 1.2.1 - Authenticated Stored Cross-Site Scripting (XSS) & CSRF

This vulnerability needs administrator privileges to exploit. Editor and author roles do not have the necessary permissions to create new sliders, contrary to what the original advisory says. However, this vulnerability can be exploited by a malicious actor by combining the XSS with CSRF to...

WordPress Testimonial Slider Plugin <= 1.2.1 - Multiple Vulnerabilities

This plugin is prone to an authenticated stored cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

WordPress Testimonial Slider 1.2.1 Cross Site Scripting

GhostMail Exploit : For Exploiting This Vulnerability Install Testimonial Slider Plugin Then Create New Slider In Slider Name Input Place Your JavaScript Code After Creating Slider JavaScript Code Will Be Executed . Image POC : Vulnerable Code : Slider ID = For Patching : Slider ID = This...

Concrete CMS: Stored XSS in Bio/Quote

XSS payload can be executed and saved permanently in testimonial Bio/Quote. Poc code: "...

Concrete CMS: Stored XSS In Company URL

XSS payload can be executed and saved permanently in testimonial Company URL. Poc code: "...

Concrete CMS: Stored XSS in testimonial Company

XSS payload can be executed and saved permanently in testimonial Company. Poc code: "...

Concrete CMS: Stored XSS in Testimonial Position

XSS payload can be executed and saved permanently in Testimonial Position. Poc code: "...

Concrete CMS: Stored XSS in Testimonial name

XSS payload can be executed and saved permanently in Testimonial name. Poc code: "...

IndiaNIC Testimonial 2.2 - iNIC_testimonial_save Action Multiple Parameter XSS

The Testimonial WordPress plugin was affected by an iNICtestimonialsave Action Multiple Parameter XSS security vulnerability...

IndiaNIC Testimonial 2.2 - Setting Manipulation CSRF

The Testimonial WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability...

IndiaNIC Testimonial 2.2 - testimonial.php custom_query Parameter SQL Injection

The Testimonial WordPress plugin was affected by a testimonial.php customquery Parameter SQL Injection security vulnerability...

joomla component cgtestimonial 2.2 - Multiple Vulnerabilities

No description provided by source. cgTestimonial 2.2 Joomla Component Multiple Remote Vulnerabilities Name cgTestimonial Vendor http://www.cmsgalaxy.com Versions Affected 2.2 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Dat...

Wordpress IndiaNIC Testimonial Plugin - Multiple Vulnerabilities

No description provided by source...

CVE-2013-5673

SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the customquery parameter in a testimonialadd action to wp-admin/admin-ajax.php...

Sql injection

SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the customquery parameter in a testimonialadd action to wp-admin/admin-ajax.php...

CVE-2013-5672

Multiple cross-site request forgery CSRF vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add a testimonial via an iNICtestimonialsave action; 2 add a listing template via an...

CVE-2013-5673

SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the customquery parameter in a testimonialadd action to wp-admin/admin-ajax.php...

CVE-2013-5673

CVE-2013-5673 concerns the WordPress plugin IndiaNIC Testimonial 2.2 , specifically a SQL injection in the file testimonial.php. The vulnerability allows remote attackers to craft a request through the testimonial_add action to wp-admin/admin-ajax.php, abusing the custom_query parameter to execut...

CVE-2013-5672

IndiaNIC Testimonial plugin 2.2 for WordPress is affected by multiple CSRF vulnerabilities that let remote attackers hijack administrator sessions via actions like iNIC_testimonial_save, iNIC_testimonial_save_listing_template, and iNIC_testimonial_save_widget, as well as inject XSS through numero...

PT-2013-5720

Name of the Vulnerable Software and Affected Versions IndiaNIC Testimonial plugin version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the custom query parameter in a testimonial add action to the "wp-admin/admin-ajax.php"...