4 matches found
CVE-2020-8549
The CVE-2020-8549 entry concerns the WordPress Strong Testimonials plugin, prior to version 2.40.1. The vulnerability is a stored XSS in the plugin (notably via client_name and company_name in the client details UI) that can lead to an attacker executing malicious actions, including stealing sess...
CVE-2024-3261
The Strong Testimonials WordPress plugin (versions before 3.1.12 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to validate and escape specific Testimonial fields before they are outputted back in a page or post. This allows users with contributor roles and abo...
CVE-2023-6491
Technical details about CVE-2023-6491 (Strong Testimonials) are not provided in the Connected documents. Public information in the Initial Description is present, but no concrete vendor/product/version/root-cause/fix details from connected sources are included. Monitor for updates.