Threats tagged 'ghsa-938g-5cx7-8cww'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.4	CVE-2026-120683The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is Medium5.42026-11-07GCVE DatabaseCVE-2026-120683 The Real Testimonials WordPress plugin up to version 4.1.0 is vulnerable to stored cross-site scripting (XSS) via the 'tpro_client_testimonial' parameter. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when an administrator approves a testimonial and the affected page loads the WordPress Interactivity runtime. The flaw is due to insufficient input sanitization and output escaping. Report on CVE-2026-120683 Vulnerability CWE-79 #ghsa-938g-5cx7-8cww	GCVE Database	2026-11-07

Page 1 of 1