PT-2025-43715 · WordPress+1 · Testimonial Carousel For Elementor+1

D.Sim

·

Published

2025-10-25

·

Updated

2025-10-25

·

CVE-2025-8666

CVSS v3.1

6.4

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Testimonial Carousel For Elementor plugin for WordPress versions prior to 11.6.3
Description The Testimonial Carousel For Elementor plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows authenticated attackers with contributor-level access or higher to inject malicious web scripts into pages. These scripts will then execute whenever a user accesses the compromised page. The issue affects multiple parameters.
Recommendations Update the Testimonial Carousel For Elementor plugin to version 11.6.3 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-8666

Affected Products

Elementor
Testimonial Carousel For Elementor