CVE-2026-92622

Strong Testimonials for WordPress (versions up to and including 3.3.8 ) contains a Stored Cross-Site Scripting vulnerability in the 'lightbox_class' shortcode attribute, caused by insufficient input sanitization and output escaping. Attackers with contributor-level access or higher can inject arb...