CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2022-33191

Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Chinmoy Paul's Testimonials plugin <= 3.0.1 at WordPress.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.1%

CVSS Severity

CVSS v3 Score 4.1

References

https://patchstack.com/database/vulnerability/testimonials/wordpress-testimonials-plugin-3-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability
https://wordpress.org/plugins/testimonials/#description
https://patchstack.com/database/vulnerability/testimonials/wordpress-testimonials-plugin-3-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability
https://wordpress.org/plugins/testimonials/#description

Products affected by CVE-2022-33191

Testimonials Project » Testimonials » Version: N/A

cpe:2.3:a:testimonials_project:testimonials:-
Testimonials Project » Testimonials » Version: 2.0

cpe:2.3:a:testimonials_project:testimonials:2.0
Testimonials Project » Testimonials » Version: 2.1

cpe:2.3:a:testimonials_project:testimonials:2.1
Testimonials Project » Testimonials » Version: 3.0

cpe:2.3:a:testimonials_project:testimonials:3.0
Testimonials Project » Testimonials » Version: 3.0.1

cpe:2.3:a:testimonials_project:testimonials:3.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-33191

Products

Pricing

Contact Us