Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Web-Settler Component: Testimonial Slider Clear all filters
TI-2021-14949 CVE-2021-36851 · GHSA-rjq3-c2jr-r9rq

WordPress Testimonial Slider plugin <= 3.5.8.3 - Cross-Site Scripting (XSS) vulnerability

Priority LOW 25

Authenticated (editor or higher user role) Cross-Site Scripting (XSS) vulnerability in Web-Settler Testimonial Slider – Free Testimonials Slider Plugin (WordPress plugin) via parameters mpsp_posts_bg_color, mpsp_posts_de…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00566 Published 2022-04-04 No fix listed CWE-79