TextMe SMS, 91bdf3cef823849e80fd5c197305dfec589b086f

CVE, Research URL: 91bdf3cef823849e80fd5c197305dfec589b086f
Home page URL: Security reports for TextMe SMS
Application: TextMe SMS
Published on: Aug 24, 2021
Research Description: TextMe SMS [textme-sms-integration] < 1.9.1 TextMe SMS <= 1.8.8 - Authenticated Stored Cross-Site Scripting The TextMe SMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 1.9.1.
Status: vulnerable