CVE-2021-24598
17.11.2021, 11:15
The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfiltered_html capability is disallowed
| Vendor | Product | Version |
|---|---|---|
| wpshopmart | testimonial_builder | 𝑥 < 1.6.0 |
𝑥
= Vulnerable software versions