vulnerability

WordPress Plugin: easy-testimonials: CVE-2020-14959: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Severity
3
CVSS
(AV:N/AC:M/Au:S/C:N/I:P/A:N)
Published
May 13, 2020
Added
May 15, 2025
Modified
May 15, 2025

Description

Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the wp-admin/post.php Client Name, Position, Web Address, Other, Location Reviewed, Product Reviewed, Item Reviewed, or Rating parameter.

Solution

easy-testimonials-plugin-cve-2020-14959
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.