CVE-2021-24156

CVE-2021-24156: Testimonial Rotator <= 3.0.3 - Authenticated Stored Cross-Site Scripting

Vendor Unknown
Product Testimonial Rotator
Weakness CWE-79 · XSS
Published April 5, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation

Key dates

02Disclosure timeline

April 5, 2021 CVE published
August 3, 2024 Record updated