Monitor free

Report

New Known

Verified

Fixed

WordPress GS Testimonial Slider plugin <= 1.9.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

4.8

CVSS 3.1 score Medium severity

Report

Monitoring Not reported to be exploited

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

GS Testimonial Slider

Type

Plugin

Vulnerable versions

<= 1.9.5

Fixed in

1.9.6

PSID

4b2c77540de2

CVE ID

CVE-2022-35882

Classification

Cross Site Scripting (XSS)

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Required privilege

Requires author or higher role user authentication.

Credits

Tien Nguyen Anh (Patchstack Alliance)

Publicly disclosed

2022-07-27

Patchstack vPatch available since

09.12.2021

Details

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Tien Nguyen Anh (Patchstack Alliance) in WordPress GS Testimonial Slider plugin (versions <= 1.9.5).

Solution

Update the WordPress GS Testimonial Slider plugin to the latest available version (at least 1.9.6).

References