Lucene search
WpvulndbWPVDB-ID:515DD091-F8EC-467B-998F-2583665C7C55HistoryApr 04, 2022 - 12:00 a.m.
Testimonial Slider <= 3.5.8.3 - Contributor+ Stored Cross-Site Scripting
2022-04-0400:00:00
wpscan.com
12
testimonial slider
cross-site scripting
stored data
EPSS
0.001
Percentile
19.4%
The plugin does not sanitise and escape some of its slider settings, such as mpsp_posts_bg_color, mpsp_posts_description_color, mpsp_slide_nav_button_color which could allow users with the edit_post capability (contributor and above) to perform Cross-Site Scripting attacks
Related
prion
prion
Cross site scripting
2022-04-04 20:15:00
nvd
nvd
CVE-2021-36851
2022-04-04 20:15:09
patchstack
patchstack
cve
cve
CVE-2021-36851
2022-04-04 20:15:09
cvelist
cvelist