cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2023-6491,https://securityvulnerability.io/vulnerability/CVE-2023-6491,Unauthorized Modification of Data in Strong Testimonials Plugin for WordPress,"The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wpmtst_save_view_sticky function in all versions up to, and including, 3.1.12. This makes it possible for authenticated attackers, with contributor access and above, to modify favorite views.",Wordpress,Strong Testimonials,4.3,MEDIUM,0.0004299999854993075,false,,false,false,false,,,false,false,,2024-06-07T05:33:46.516Z,0 CVE-2024-3261,https://securityvulnerability.io/vulnerability/CVE-2024-3261,Stored Cross-Site Scripting Vulnerability in Strong Testimonials WordPress Plugin,"The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. The attack requires a specific view to be performed",Wordpress,Strong Testimonials,,,0.0004299999854993075,false,,false,false,true,2024-04-24T04:00:03.000Z,true,false,false,,2024-04-24T05:00:03.121Z,0 CVE-2022-4717,https://securityvulnerability.io/vulnerability/CVE-2022-4717,Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode,"The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.",Wordpress,Strong Testimonials,5.4,MEDIUM,0.000539999979082495,false,,false,false,false,,,false,false,,2023-02-06T19:59:15.762Z,0 CVE-2020-8549,https://securityvulnerability.io/vulnerability/CVE-2020-8549,Stored XSS Vulnerability in Strong Testimonials Plugin for WordPress,"The Strong Testimonials plugin for WordPress, prior to version 2.40.1, is susceptible to a Stored XSS vulnerability. This flaw allows attackers to inject malicious scripts into pages viewed by users, which can lead to serious security risks such as session hijacking and unauthorized actions executed from the victim's browser. It is crucial for users of this plugin to update to the latest version to mitigate the risk of exploitation.",Wordpress,Strong Testimonials,6.1,MEDIUM,0.00547999981790781,false,,false,false,false,,,false,false,,2020-02-03T16:43:03.000Z,0