← Back

Testimonial Rotator

testimonial_rotator

Vendor: Testimonial Rotator Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24156
1Testimonial Rotator Project
1Testimonial Rotator
Jun 17, 2026
Apr 5, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation
CVE-2020-26672
1Testimonial Rotator Project
1Testimonial Rotator
Jun 17, 2026
Oct 16, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the data...Show more
Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database.Show less