The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.
Product
bestwebsoft testimonials vulnerabilities
2 published CVES affecting bestwebsoft testimonials, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest bestwebsoft testimonials CVEs
Newest publication first
-
MediumCVSS 6.1 EPSS 1.4%
-
MediumCVSS 6.1 EPSS 0.89%
Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fie...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.