Stored Cross-Site Scripting Vulnerability in Strong Testimonials Plugin for WordPress

CVE-2026-115811

What is CVE-2026-115811?

The Strong Testimonials plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability through the 'star_rating' parameter due to inadequate sanitization of input and output escaping. This flaw allows unauthenticated attackers to embed malicious web scripts into pages, which are then executed when users interact with the compromised pages. Particularly, an administrator previewing a pending testimonial, a common step in the moderation process, triggers the execution of these scripts, increasing the risk of malicious exploits.

References