CVE-2020-8549

The CVE-2020-8549 entry concerns the WordPress Strong Testimonials plugin, prior to version 2.40.1. The vulnerability is a stored XSS in the plugin (notably via client_name and company_name in the client details UI) that can lead to an attacker executing malicious actions, including stealing sess...

PT-2020-20202 · WordPress · Strong Testimonials

Name of the Vulnerable Software and Affected Versions: Strong Testimonials plugin versions prior to 2.40.1 Description: The issue allows an attacker to perform malicious actions, such as stealing session tokens, by exploiting a Stored XSS vulnerability in the Strong Testimonials plugin for...

CVE-2020-8549: Improper Neutralization of Input During Web Page Generation

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens...

Strong Testimonials < 2.40.1 - Stored Cross Site Scripting (XSS)

Multiple stored XSS vulnerabilities found in popular WordPress testimonial plugin, Strong Testimonials. First reported to the Strong Testimonials team on 23rd January 2020...

WordPress Strong Testimonials plugin <= 2.40.0 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability found by Jinson Varghese Behanan in WordPress Strong Testimonials plugin versions = 2.40.0. Solution Update the WordPress Strong Testimonials plugin to the latest available version at least 2.40.1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

CVE-2013-4241

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

CVE-2013-4241

CVE-2013-4241 (HMS Testimonials plugin for WordPress) : The NVD and related records describe multiple XSS vulnerabilities in the HMS Testimonials plugin for WordPress, fixed in versions before 2.0.11. The affected vectors include the Testimonial form fields (name, image, url, testimonial) and sev...

PT-2020-7488

Name of the Vulnerable Software and Affected Versions: HMS Testimonials plugin versions prior to 2.0.11 Description: The issue allows remote attackers to inject arbitrary web script or HTML via several parameters, including name, image, url, testimonial, date format, to various forms and settings...

CVE-2013-4241: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

PT-2020-6781

Name of the Vulnerable Software and Affected Versions Easy Testimonials plugin versions prior to 3.6 for WordPress Description The issue allows remote attackers to inject arbitrary web script or HTML via certain parameters in the wp-admin/post.php file, including Client Name, Position, Web Addres...

WordPress bws-testimonials plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress bws-testimonials plugin. An attacker can exploit...

CVE-2017-18558

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

Cross site scripting

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

CVE-2017-18558

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

CVE-2017-18558

CVE-2017-18558 affects the WordPress plugin bws-testimonials, version before 0.1.9. The connected Nuclei/WPVuln/Red Hat et al. entries confirm multiple XSS flaws in this plugin, caused by inadequate input/output sanitization, enabling authenticated attackers to inject and execute arbitrary JavaSc...

CVE-2017-18558

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

PT-2019-8492

Name of the Vulnerable Software and Affected Versions bws-testimonials plugin versions prior to 0.1.9 Description The issue is related to multiple XSS problems. Recommendations For versions prior to 0.1.9, update to version 0.1.9 or later to resolve the issue...

CVE-2017-18558: Improper Neutralization of Input During Web Page Generation

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues...

WordPress Easy Testimonials Cross Site Scripting

A XSS injection vulnerability exists in WordPress Easy Testimonials Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary commands on the affected system...