Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kerry Kline BNE Testimonials plugin <= 2.0.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kerry Kline | BNE Testimonials | ≤ 2.0.7 | — |
Medium · 6.5
CVE-2023-24411
EUVD-2023-28467GHSA-v64q-3mp5-79h2
WordPress BNE Testimonials Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
Published Apr 6, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack