TI-2023-01297 CVE-2023-1372 · GHSA-x56h-98cj-8x32WH Testimonials <= 3.0.0 - Unauthenticated Stored Cross-Site ScriptingPriority LOW 39The WH Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters such as wh_homepage, wh_text_short, wh_text_full and in versions up to, and including, 3.0.0 due to insufficien…CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00743 · Published 2023-03-13 · No fix listed CWE-79