TI-2013-02243 CVE-2013-2501 · GHSA-g22h-22vf-v6vpCross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for…Priority LOW 28Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05268 · Published 2013-03-22 · No fix listed CWE-79