CVE-2022-40213: WordPress GS Testimonial Slider plugin <= 1.9.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in GS Testimonial Slider plugin <= 1.9.6 at WordPress.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/GS Testimonial Sliderto a version that resolves this vulnerability.Fixed in 1.9.7
Event History
Frequently Asked Questions
What is the severity of CVE-2022-40213?
CVE-2022-40213 is classified as a medium severity vulnerability due to potential exploits allowing attackers to execute malicious scripts.
How do I fix CVE-2022-40213?
To fix CVE-2022-40213, update the GS Testimonial Slider plugin to version 1.9.7 or later to eliminate the stored XSS vulnerabilities.
What types of attacks are possible with CVE-2022-40213?
CVE-2022-40213 can lead to authenticated stored XSS attacks, allowing attackers to execute scripts in the context of affected users.
Who is affected by CVE-2022-40213?
CVE-2022-40213 affects users of the GS Testimonial Slider plugin for WordPress versions 1.9.6 and below who have contributor or higher permissions.
Is CVE-2022-40213 actively being exploited?
As of the latest updates, there have been indications of CVE-2022-40213 being actively exploited in the wild.