exploitDog

CVE-2021-24156

Опубликовано: 05 апр. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation

Ссылки

https://mega.nz/file/ftVSmRCC#ctqUg89CKszEuLO3eeQVazUStTPvoQD6LlbWNSMa7uA
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/8b6f4a77-4008-4730-9a91-fa055a8b3e68
Exploit
Third Party Advisory
https://mega.nz/file/ftVSmRCC#ctqUg89CKszEuLO3eeQVazUStTPvoQD6LlbWNSMa7uA
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/8b6f4a77-4008-4730-9a91-fa055a8b3e68
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:testimonial_rotator_project:testimonial_rotator:3.0.3:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 38%

0.00162

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

CWE-79

Связанные уязвимости

GHSA-8fj3-pqx4-w3mg

github

больше 3 лет назад

Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation

EPSS

Процентиль: 38%

0.00162

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

CWE-79