WPC Smart Messages for WooCommerce, CVE-2025-62903

CVE, Research URL: CVE-2025-62903
Home page URL: Security reports for WPC Smart Messages for WooCommerce
Application: WPC Smart Messages for WooCommerce
Published on: Oct 27, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPClever WPC Smart Messages for WooCommerce wpc-smart-messages allows Stored XSS.This issue affects WPC Smart Messages for WooCommerce: from n/a through <= 4.2.4.
Affected versions: max 4.2.4.
Status: vulnerable