PatchTheCVEtestimonial slider vulnerabilities and fixes
Recent CVEs affecting testimonial slider, with upgrade or downgrade steps. 2 tracked.
Also searched as: testimonialslider.
testimonial slider has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-11-08. Highest priority: CVE-2022-44741 (score 28/100).
- CVE-2022-44741 MEDIUM 6.1 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testim
- CVE-2021-36851 MEDIUM 4.1 UPGRADE Authenticated (editor or higher user role) Cross-Site Scripting (XSS) vulnerability in Web-Settler Testimonial
FAQ
How do I fix testimonial slider vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is testimonial slider being exploited right now?
None of the tracked testimonial slider CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which testimonial slider CVE should I patch first?
CVE-2022-44741 currently ranks highest (28/100): Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testim.