CVE-2020-26672: Testimonial Rotator Project Testimonial Rotator

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. If a user intercepts a request and inserts a payload in "cite" parameter, the payload will be stored in the database.

Affected products

• Testimonial Rotator Project Testimonial Rotator: before 3.0.3 (fixed in 3.0.3)

Published 2020-10-16. Last modified 2026-06-17.