Количество 3
Количество 3
CVE-2023-2178
The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
GHSA-8593-q8c6-2ggq
The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
BDU:2023-07340
Уязвимость плагина Aajoda Testimonials системы управления содержимым сайта WordPress, позволяющая нарушителю проводить межсайтовые сценарные атаки
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2023-2178 The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). | CVSS3: 4.8 | 3% Низкий | больше 2 лет назад | |
GHSA-8593-q8c6-2ggq The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). | CVSS3: 4.8 | 3% Низкий | больше 2 лет назад | |
BDU:2023-07340 Уязвимость плагина Aajoda Testimonials системы управления содержимым сайта WordPress, позволяющая нарушителю проводить межсайтовые сценарные атаки | CVSS3: 4.8 | 3% Низкий | больше 2 лет назад |
Уязвимостей на страницу