header-logo
Suggest Exploit
vendor:
Easy Testimonials
by:
En_dust
N/A
CVSS
N/A
Cross-Site Scripting
Unknown
CWE
Product Name: Easy Testimonials
Affected Version From: 3.2
Affected Version To: 3.2
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested: Windows 10 x64
2018

WordPress Plugins Easy Testimonials 3.2 – Cross-Site Scripting

A Stored Cross-site scripting (XSS) was discovered in wordpress plugins easy testimonials 3.2. Three parameters(_ikcf_client _ikcf_position _ikcf_other) have Cross-Site Scripting.

Mitigation:

Unknown
Source

Exploit-DB raw data: