📦

testimonials_pro

Vendor: themepoints

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 1 Total Indexed
Avg. EPSS 0.50% Exploit Prob.
Latest CVE CVE-2022-3539 Nov 14

Security Vulnerability Index

Page 1 / 1
4.8 CVSS
CVE-2022-3539

The Testimonials WordPress plugin before 2.7, super-testimonial-pro WordPress plugin before 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

EPSS: 0.50%