WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc, 9f80d9ea-e4ce-4957-9b22-3464446ab003
- CVE, Research URL
- Home page URL
- Application
-
WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc
- Published on
- -
- Research Description
- WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce [wp-sms] < 5.4.9.1 WP SMS < 5.4.9.1 - Reflected Cross-Site Scripting (XSS) The plugin does not sanitise or escape some of its parameter before outputting them back in the pages, leading to reflected Cross-Site Scripting issues which will be executed in the context of a logged in admin.
- Affected versions
-
max 5.4.9.1.
- Status
-
vulnerable