Input validation vulnerability in Aajoda Testimonials 2.2.1

The Aajoda Testimonials plugin for WordPress is potentially vulnerable to malicious attacks if certain conditions are met. If you are using WordPress multi-site, or have turned off the unfiltered_html setting, an attacker with administrator-level permission and above may be able to inject malicious web scripts into pages which will run when a user visits the affected page. Versions up to and including 2.2.1 are vulnerable to this type of attack due to lack of input validation and output escaping.