Medium · 4.8 CVE-2022-35882 EUVD-2022-38755GHSA-cxc6-fgqh-pv3g

WordPress GS Testimonial Slider plugin <= 1.9.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Jul 28, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: GS Plugins Product: GS Testimonial Slider (WordPress plugin) Category: Web / CMS

Description

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in GS Plugins GS Testimonial Slider plugin <= 1.9.5 at WordPress.

Affected products

Vendor	Product	Affected	Fixed
GS Plugins	GS Testimonial Slider (WordPress plugin)	<= 1.9.5 – ≤ 1.9.5	—

References

https://wordpress.org/plugins/gs-testimonial/#developers
https://patchstack.com/database/vulnerability/gs-testimonial/wordpress-gs-testimonial-slider-plugin-1-9-1-authenticated-stored-cross-site-scripting-xss-vulnerability