GS Plugins GS Testimonial Slider Code Injection Vulnerability

A code injection vulnerability has been identified in the GS Testimonial Slider plugin for WordPress, affecting versions through 3.2.9. This vulnerability allows for improper control over code generation, enabling malicious actors to inject content into the pages and posts of affected websites. Such an injection could be exploited to introduce phishing pages or other harmful content.

Impact

Exploitation of this vulnerability could lead to unauthorized content injection on the affected WordPress site, with potential misuse for phishing or other malicious purposes.

Remediation

Users of the GS Testimonial Slider plugin should update to version 3.3.0 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.