Stored Cross-Site Scripting Vulnerability in Super Testimonials Plugin for WordPress

CVE-2023-5613

Summary

The Super Testimonials plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate sanitization of the 'tpsscode' shortcode attributes. This vulnerability affects all versions up to 2.9, enabling authenticated attackers with contributor-level permissions or higher to inject malicious scripts into user-accessible pages. These scripts may be executed in users' browsers, compromising their security and potentially leading to unauthorized data access or manipulation.

References