CVE-2022-23912

CVE-2022-23912: AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting

Vendor Unknown
Product Testimonial WordPress Plugin – AP Custom Testimonial
Weakness CWE-79 · XSS
Published February 28, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not sanitise and escape the id parameter before outputting it back in an attribute, leading to a Reflected cross-Site Scripting

Key dates

02Disclosure timeline

February 28, 2022 CVE published
August 3, 2024 Record updated