CVE-2017-12131 - The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens

Back Back to CVE browser

MEDIUM

The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens

Published Aug 1, 2017

6.1

MEDIUM

CVSS 3.0

EPSS 0.78%

Description

The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3715
Advisory
https://github.com/kevins1022/cve/blob/master/wordpress-Easy-Testimonials.md
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3715		Advisory
https://github.com/kevins1022/cve/blob/master/wordpress-Easy-Testimonials.md		x_refsource_MISCExploitThird Party Advisory