MoceanAPI Order SMS Notification for WooCommerce, 03f69e960066d4206c7fcec10d264b4f04762f7b

CVE, Research URL: 03f69e960066d4206c7fcec10d264b4f04762f7b
Home page URL: Security reports for MoceanAPI Order SMS Notification for WooCommerce
Application: MoceanAPI Order SMS Notification for WooCommerce
Published on: Jul 18, 2023
Research Description: MoceanAPI Order SMS Notification for WooCommerce [moceansms-order-sms-notification-for-woocommerce] <= 1.4.11 (unfixed) WordPress MoceanAPI Order SMS Notification for WooCommerce Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS) No patched version available. Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress MoceanAPI Order SMS Notification for WooCommerce Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.
Affected versions: max 1.4.11.
Status: vulnerable