PT-2021-16104

Name of the Vulnerable Software and Affected Versions SMS Alert Order Notifications WordPress plugin versions prior to 3.4.7 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the plugin's setting page, which could allow an attacker to...

CVE-2021-24588: Improper Neutralization of Input During Web Page Generation

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting XSS vulnerability in the plugin's setting page...

WordPress SMS Alert Order Notifications – WooCommerce plugin <= 3.4.6 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability discovered by Swapnil Bodekar in WordPress SMS Alert Order Notifications – WooCommerce plugin versions = 3.4.6. Solution Update the WordPress SMS Alert Order Notifications – WooCommerce plugin to the latest available version at least 3.4.7...

PT-2017-15037

Name of the Vulnerable Software and Affected Versions ServersCheck Monitoring Software versions prior to 14.2.3 Description The issue arises from the lack of validation and sanitization of user-supplied data passed in the settings SMS ALERT TYPE parameter. This allows JavaScript to be executed on...