The bws-testimonials plugin prior to 0.1.9 for WordPress has multiple XSS issues.
bestwebsoft testimonials