Real Testimonials, b608d2d1-b757-427b-a079-32792c2a8d42
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials [testimonial-free] < 2.1.7 Testimonial < 2.2 - Authenticated Stored Cross-Site Scripting (XSS) A stored XSS vulnerability exists in the version of the plugin 2.1.6. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inject arbitrary javascript code into the plugin gallery image which is viewed by other users.
- Affected versions
-
max 2.1.7.
- Status
-
vulnerable