CVE-2026-114706: WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.15.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Strong Testimonials (strong-testimonials)to a version that resolves this vulnerability.Fixed in 3.3.16
Event History
Frequently Asked Questions
What access and interaction are required to exploit this issue?
An attacker needs low-privilege access to the affected site and a user must interact with the malicious content. The vector is network-accessible and the attack complexity is rated low.
What could exploitation allow?
Successful exploitation could result in stored cross-site scripting in Strong Testimonials. The supplied impact metrics indicate low impact to confidentiality, integrity, and availability, with the impact scope extending beyond the vulnerable component.
Which plugin versions are affected?
Strong Testimonials versions through 3.3.15 are affected. The available data does not identify a fixed version.