3 matches found
CVE-2024-37553 WordPress Testimonials Widget plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Axelerant Testimonials Widget allows Stored XSS.This issue affects Testimonials Widget: from n/a through 4.0.4...
WordPress Testimonials Widget Plugin <= 4.0.4 is vulnerable to Cross Site Scripting (XSS)
Software Testimonials Widget Type Plugin Vulnerable versions = 4.0.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37553 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e3f989753985 Credits Joshua Chan Required privilege...
WordPress Testimonials Widget plugin <= 2.5.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated Stored Cross-Site Scripting XSS vulnerabilities found by Nguyen Anh Tien in WordPress Testimonials Widget plugin versions = 2.5.1. Solution Update the WordPress Testimonials Widget plugin to the latest available version at least 4.0.0...