CVE-2013-4241

MEDIUM

WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2013-4241 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

Multiple cross-site scripting (XSS) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) image, (3) url, or (4) testimonial parameter to the Testimonial form (hms-testimonials-addnew page); (5) date_format parameter to the Settings - Default form (hms-testimonials-settings page); (6) name parameter in a Save action to the Settings - Custom Fields form (hms-testimonials-settings-fields page); or (7) name parameter in a Save action to the Settings - Template form (hms-testimonials-templates-new page).

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

HMS Testimonials

Browse HitMyServer / HMS Testimonials
CVE Listbefore 2.0.11affected

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin Hms Testimonials 2.0.10 - Multiple VulnerabilitiesExploitDB exploitby RogueCoderNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB
PoC details

References

6