The Testimonials WordPress plugin prior to 2.7, super-testimonial-pro WordPress plugin prior to 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
themepoints testimonials |
||
themepoints testimonials pro |
Vulmon