CVE-2022-4577
Easy Testimonials < 3.9.3 - Contributor+ Stored XSS
The Easy Testimonials WordPress plugin before 3.9.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.
We have discovered 9 live websites that are affected by CVE-2022-4577.
Affected Software
| Product |  Easy Testimonials |
| Category | Wordpress Plugins |
| Vulnerable Versions |
|
| Total Vulnerable Versions | 21 |
| Vulnerable Domains | 9 live websites (6.72% of Easy Testimonials install base) |
Common Weakness Enumeration
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Distribution by Website Rank
The diagram provides a graphic representation of the correlation between the occurrence of CVE-2022-4577 and the relative popularity of websitesDetails
- Published - Feb 6, 2023
Credits
- Lana Codes (finder)
- WPScan (coordinator)
CWE
CVE References
CWE References
Countries
 United States | 1 websites |
 Belgium | 3 websites |
 France | 2 websites |
 Germany | 1 websites |
 GB | 1 websites |
 Netherlands | 1 websites |
TLDs
| .be | 2 websites |
| .fr | 2 websites |
| .co.uk | 1 websites |
| .com | 1 websites |
| .de | 1 websites |
| .nl | 1 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redGeographical Distribution
The distribution of websites across the globe that are exposed to CVE-2022-4577 through included software libraries and plugins.Websites affected by CVE-2022-4577
Top websites that are affected by CVE-2022-4577. Please click on the "Contact us" button above to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ********.nl | Netherlands | *,***,*** | |
| ********.vlaanderen | Belgium | *,***,*** | |
| ********.fr | France | *,***,*** | |
| ********.de | Germany | *,***,*** | |
| ********.**.uk | GB | *,***,*** | |
| ****************.fr | France | *,***,*** | |
| ********.be | Belgium | *,***,*** | |
| ****************.be | Belgium | *,***,*** | |
| *********.com | United States | *,***,*** |