Skip to content
OpenAdvisories
Medium · 4.1 CVE-2021-36851 EUVD-2021-23427GHSA-rjq3-c2jr-r9rq

WordPress Testimonial Slider plugin <= 3.5.8.3 - Cross-Site Scripting (XSS) vulnerability

Published Apr 4, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Web-Settler Product: Testimonial Slider – Free Testimonials Slider Plugin (WordPress plugin) Category: Web / CMS

Description

Authenticated (editor or higher user role) Cross-Site Scripting (XSS) vulnerability in Web-Settler Testimonial Slider – Free Testimonials Slider Plugin (WordPress plugin) via parameters mpsp_posts_bg_color, mpsp_posts_description_color, mpsp_slide_nav_button_color.

Affected products

VendorProductAffectedFixed
Web-Settler Testimonial Slider – Free Testimonials Slider Plugin (WordPress plugin) <= 3.5.8.3 – ≤ 3.5.8.3 —

References