Lucene search
Asif Nawaz MinhasWPVDB-ID:365C09A7-0B10-4145-A415-5C0E9F429AE0HistoryOct 13, 2021 - 12:00 a.m.
Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting
2021-10-1300:00:00
Asif Nawaz Minhas
wpscan.com
5
0.001 Low
EPSS
Percentile
21.6%
The plugin does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfiltered_html capability is disallowed
PoC
As admin, create/edit a testimonial and put the following payload in the Testimonial User Name field: " style=animation-name:rotation onanimationstart=alert(/XSS/)//
| CPE | Name | Operator | Version |
|---|---|---|---|
| testimonial-builder | lt | 1.6.0 |
Related
nvd
nvd
CVE-2021-24598
2021-11-17 11:15:07
wpexploit
wpexploit
Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting
2021-10-13 00:00:00
cve
cve
CVE-2021-24598
2021-11-17 11:15:07
patchstack
patchstack
cvelist
cvelist
cnvd
cnvd
WordPress Testimonial Plugin Cross-Site Scripting Vulnerability
2021-11-21 00:00:00
prion
prion
Cross site scripting
2021-11-17 11:15:00