Description
Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://wpvulndb.com/vulnerabilities/10056 ↗
- https://github.com/MachoThemes/strong-testimonials/blob/master/changelog.txt ↗
- https://www.getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-strong-testimonials-plugin/ ↗
- https://www.jinsonvarghese.com/stored-xss-vulnerability-in-strong-testimonials-plugin/ ↗
- http://packetstormsecurity.com/files/156369/WordPress-Strong-Testimonials-2.40.1-Cross-Site-Scripting.html ↗