Stored XSS Vulnerability found in Strong Testimonials Plugin <= 2.40.0

Strong Testimonials has over 90,000 active installations. The stored XSS vulnerabilities found in the plugin can be exploited by attackers to perform malicious actions such as stealing the victim’s session cookies or login credentials, performing arbitrary actions on the victim’s behalf, logging their keystrokes and more. Strong Testimonials version 2.40.1 containing the fix to the vulnerability was released on January 25, 2020.