Read the docs

aajoda

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

aajoda records in CISA KEV

No aajoda vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Aajoda Testimonials 1 record MEDIUM

Records

2 records

TI-2023-02043 CVE-2023-2178 · GHSA-8593-q8c6-2ggq

Aajoda Testimonials < 2.2.2 - Admin+ Stored XSS

Priority MEDIUM 55

The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the u…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00773 Published 2023-06-27 Fixed in 2.2.2
TI-2024-34528 CVE-2024-51614 · GHSA-89p7-8g57-w97p

WordPress Aajoda Testimonials plugin <= 2.2.2 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aajoda Aajoda Testimonials aajoda-testimonials allows Stored XSS.This issue affects Aajoda Testimonials: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00253 Published 2024-11-09 No fix listed CWE-79
Open these records in search →