Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:97F7BA3B-00C2-4A8B-97DA-8145986991FF
HistoryJul 19, 2022 - 12:00 a.m.

Testimonials <= 3.0.1 - Contributor+ Stored Cross-Site Scripting

2022-07-1900:00:00
wpscan.com
10
testimonials plugin
vulnerability
contributor role
xss
software

EPSS

0.001

Percentile

19.4%

JSON

The plugin does not sanitise and escape some parameters available to users with a role as low as contributor, allowing them to perform Stored Cross-Site Scripting attacks

Related

patchstack 1
prion 1
cvelist 1
cnvd 1
nvd 1
cve 1
patchstack
patchstack
WordPress Testimonials plugin <= 3.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
2022-07-19 00:00:00
prion
prion
Cross site scripting
2022-07-22 17:15:00
cvelist
cvelist
CVE-2022-33191 WordPress Testimonials plugin <= 3.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
2022-07-22 16:46:52
cnvd
cnvd
WordPress Testimonials plugin跨站脚本漏洞
2022-07-26 00:00:00
nvd
nvd
CVE-2022-33191
2022-07-22 17:15:08
cve
cve
CVE-2022-33191
2022-07-22 17:15:08

EPSS

0.001

Percentile

19.4%

JSON
Related for WPVDB-ID:97F7BA3B-00C2-4A8B-97DA-8145986991FF
patchstack1prion1cvelist1cnvd1nvd1cve1