TI-2025-13135 CVE-2025-14378 · GHSA-rrwv-r5g8-6jc7
Quick Testimonials <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Priority LOW 20
The Quick Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping.