Slidervilla: >> Testimonial Slider >> 1.2 Security Vulnerabilities
Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slider plugin <= 1.3.1 on WordPress.
CVSS Score
6.1
EPSS Score
0.001
Published
2022-11-08
The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.
CVSS Score
6.5
EPSS Score
0.002
Published
2019-09-26
The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).
CVSS Score
8.8
EPSS Score
0.005
Published
2018-01-12