PT-2019-7376 · WordPress · Testimonial Slider

Published 2019-09-25 · Updated 2019-09-26 · CVE-2015-9417

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions testimonial-slider plugin versions prior to 1.2.2

Description The issue concerns a CSRF vulnerability that results in XSS. This means an attacker can trick a user into performing unintended actions on the website, potentially leading to the execution of malicious scripts.

Recommendations For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2015-9417

Affected Products

Testimonial Slider

References · 6

• 🔥 https://wpvulndb.com/vulnerabilities/8170 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-9417 · Security Note
• https://t.me/cibsecurity/7065 · Telegram Post
• https://t.me/cibsecurity/7028 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9417 · Note
• https://wordpress.org/plugins/testimonial-slider/#developers · Note