Lucene search
Rafael CastilhoWPVDB-ID:09512431-AA33-4514-8B20-1963C5D89F33HistoryJan 25, 2022 - 12:00 a.m.
AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting
2022-01-2500:00:00
Rafael Castilho
wpscan.com
1
0.001 Low
EPSS
Percentile
30.2%
The plugin does not sanitise and escape the id parameter before outputting it back in an attribute, leading to a Reflected cross-Site Scripting
PoC
https://example.com/wp-admin/admin.php?page=apct_testimonial_edit&id;=1">
| CPE | Name | Operator | Version |
|---|---|---|---|
| ap-custom-testimonial | lt | 1.4.7 |
Related
patchstack
patchstack
prion
prion
Cross site scripting
2022-02-28 09:15:00
cve
cve
CVE-2022-23912
2022-02-28 09:15:09
cnvd
cnvd
WordPress Testimonial Plugin Cross-Site Scripting Vulnerability
2022-03-02 00:00:00
nvd
nvd
CVE-2022-23912
2022-02-28 09:15:09
cvelist
cvelist
wpexploit
wpexploit
AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting
2022-01-25 00:00:00