WordPress Elegant Testimonial plugin version 1.1.6 suffers from a persistent cross site scripting vulnerability.