Input validation vulnerability in Super Testimonials 4.0.1

The Super Testimonials plugin for WordPress has a security issue where attackers can inject harmful code into pages through a parameter called ‘st_user_title’. This can happen in all versions up to 4.0.1 because the plugin does not properly clean up or protect against this type of attack. This means that someone who is not logged in to the website can cause their own code to run when other users access the page with the injected code.