Skip to main content

CVE-2023-2178

Description

The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

NVD
Severity: MEDIUM
CVE ID: CVE-2023-2178
CVSS Score: 4.8
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Refrence: NVD MITRE

Proof Of Concept

Nuclei Templates for CVE-2023-2178

Refrence: Project Discovery GitHub

Description
Proof Of Concept