Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Testimonial Rotator Project Clear all filters
TI-2021-06448 CVE-2021-24156 · GHSA-8fj3-pqx4-w3mg

Testimonial Rotator <= 3.0.3 - Authenticated Stored Cross-Site Scripting

Priority LOW 26

Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00687 Published 2021-04-05 No fix listed CWE-79