CVE-2020-8549 - Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens

Back Back to CVE browser

MEDIUM

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens

Published Feb 3, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 1.88%

Description

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://packetstormsecurity.com/files/156369/WordPress-Strong-Testimonials-2.40.1-Cross-Site-Scripting.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://github.com/MachoThemes/strong-testimonials/blob/master/changelog.txt
x_refsource_MISCRelease NotesThird Party Advisory
https://wpvulndb.com/vulnerabilities/10056
x_refsource_MISCThird Party Advisory
https://www.getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-strong-testimonials-plugin/
x_refsource_MISCExploitThird Party Advisory
https://www.jinsonvarghese.com/stored-xss-vulnerability-in-strong-testimonials-plugin/
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/156369/WordPress-Strong-Testimonials-2.40.1-Cross-Site-Scripting.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://github.com/MachoThemes/strong-testimonials/blob/master/changelog.txt		x_refsource_MISCRelease NotesThird Party Advisory
https://wpvulndb.com/vulnerabilities/10056		x_refsource_MISCThird Party Advisory
https://www.getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-strong-testimonials-plugin/		x_refsource_MISCExploitThird Party Advisory
https://www.jinsonvarghese.com/stored-xss-vulnerability-in-strong-testimonials-plugin/		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 3, 2020

Updated Aug 4, 2024

Reserved Feb 3, 2020

Link CVE-2020-8549

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8549

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8549