CVE-2021-24156

5.4 mediumEPSS 0.7%

Medium (5.4) in testimonial rotator project testimonial rotator. EPSS 0.7% chance of exploitation in the next 30 days.

Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-04-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

testimonial_rotator_project:testimonial_rotator

References

https://mega.nz/file/ftVSmRCC#ctqUg89CKszEuLO3eeQVazUStTPvoQD6LlbWNSMa7uA
https://wpscan.com/vulnerability/8b6f4a77-4008-4730-9a91-fa055a8b3e68
https://mega.nz/file/ftVSmRCC#ctqUg89CKszEuLO3eeQVazUStTPvoQD6LlbWNSMa7uA
https://wpscan.com/vulnerability/8b6f4a77-4008-4730-9a91-fa055a8b3e68

Check your stack JSON