What is GHSA-34j2-7r4g-h79x?

GHSA-34j2-7r4g-h79x is a security advisory published by GitHub Security Advisories with Medium severity. The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode...

Which CVE IDs does GHSA-34j2-7r4g-h79x cover?

GHSA-34j2-7r4g-h79x covers the following CVE IDs: CVE-2026-15245. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-34j2-7r4g-h79x?

GHSA-34j2-7r4g-h79x has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-34j2-7r4g-h79xMediumCVSS 5.4

The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode...

Vendor

GitHub Security Advisories

Published

August 7, 2026

Last Modified

August 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-15245 →

📋 Description

The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly escape a shortcode attribute for a JavaScript context before echoing it into an inline script, allowing users with the contributor role and above to inject arbitrary JavaScript that executes in the browser of anyone viewing the affected content.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-15245
https://wpscan.com/vulnerability/7399dd14-66a3-4747-aeb2-001ff6c31397
https://github.com/advisories/GHSA-34j2-7r4g-h79x