Description
Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Testimonial Rotator | 3.0.3 – ≤ 3.0.3 | — |