Aller au contenu
Se connecter
Non notée

CVE-2021-24136 Unvalidated input and lack of output encoding in the Testimonials Widget WordPress plugin, versions before 4.0.0, lead…

Description

Unvalidated input and lack of output encoding in the Testimonials Widget WordPress plugin, versions before 4.0.0, lead to multiple Cross-Site Scripting vulnerabilities, allowing remote attackers to inject arbitrary JavaScript code or HTML via the below parameters: - Author - Job Title - Location - Company - Email - URL

Produits et versions touchés

Produit Versions touchées Corrigé en
Testimonials Widget 4.0 premières → < 4.0.0 4.0.0

Autres CVE de Testimonials Widget

Les 3 CVE de Testimonials Widget →
CVE-2026-96533 The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before fetching it… 5.8 Moyenne CVE-2026-96532 The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling… 7.5 Élevée
Suivre cette CVE