← Back to CVE List

CVE-2020-26672

Published: 2020-10-16T15:15Z
Last Modified: 2024-11-21T05:20Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt