medium5.4
CVE-2021-24156
Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML w…
Impact
Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Testimonial Rotator Project | Testimonial Rotator | Version 3.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://mega.nz/file/ftVSmRCC#ctqUg89CKszEuLO3eeQVazUStTPvoQD6LlbWNSMa7uA
- https://wpscan.com/vulnerability/8b6f4a77-4008-4730-9a91-fa055a8b3e68
- https://mega.nz/file/ftVSmRCC#ctqUg89CKszEuLO3eeQVazUStTPvoQD6LlbWNSMa7uA
- https://wpscan.com/vulnerability/8b6f4a77-4008-4730-9a91-fa055a8b3e68