The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php as demonstrated by the Default Testimonials Width View More Testimonials Link and Testimonial Excerpt Options screens.