Radiustheme Testimonial Slider And Showcase vulnerabilities
3 vulnerabilities
Known vulnerabilities in Radiustheme Testimonial Slider And Showcase, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2022-50947radiustheme · testimonial_slider_and_showcaseWordPress Plugin Testimonial Slider and Showcase 2.2.6 Stored XSSAttackers with editor privileges can inject JavaScript payloads through the testimonial title field that execute in the browsers of users viewing the draft post, enabling cookie theft and session hijacking.EPSS0.20%MediumCVE-2024-1745radiustheme · testimonial_slider_and_showcase +2 moreTestimonial Slider < 2.3.7 - Author+ Settings UpdateThe Testimonial Slider WordPress plugin before 2.3.7 does not properly ensure that a user has the necessary capabilities to edit certain sensitive Testimonial Slider WordPress plugin before 2.3.7 settings, making it possible for users with at least the Author role to edit them.EPSS0.38%MediumCVE-2024-1746radiustheme · testimonial_slider_and_showcase +2 moreTestimonial Slider < 2.3.8 - Admin+ Stored XSSThe Testimonial Slider WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)EPSS0.44%