CVE-2020-8549

MEDIUM 6.1CVE-2020-8549 · Published 03/02/2020 · updated 17/06/2026

In short

CVE-2020-8549 is a MEDIUM (CVSS 6.1) vulnerability affecting strong testimonials (wpchill).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.4% of all vulnerabilities.
Fix: update to 2.40.1 or later.

Package	Affected versions	Patched versions
strong testimonials wpchill	`< 2.40.1`	`2.40.1`

Description

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens.

References

packetstormsecurity.com/files/156369/WordPress-Strong-Testimonials-2.40.1-Cross-Site-Scripting.html · Exploit
MachoThemes/strong-testimonials · Release Notes
wpvulndb.com/vulnerabilities/10056 · Third Party Advisory
getastra.com/blog/911/plugin-exploit/stored-xss-vulnerability-found-in-strong-testimonials-plugin · Exploit
jinsonvarghese.com/stored-xss-vulnerability-in-strong-testimonials-plugin · Exploit

More vulnerabilities in strong testimonials

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

strong testimonials

wpchill

< 2.40.1

2.40.1

More vulnerabilities in strong testimonials

See all →