VendorsTestimonial Rotator Projecttestimonial_rotatorall versions
Vulnerabilities

Testimonial Rotator Project Testimonial Rotator

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2020-26672
Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database.
Published 2020-10-16 · Modified
5.4EPSS 0.007
CVE-2021-24156
Testimonial Rotator <= 3.0.3 - Authenticated Stored Cross-Site Scripting
Published 2021-04-05 · Modified
5.4EPSS 0.007