8 matches found
CVE-2021-38357
The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1...
Cross site scripting
The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1...
CVE-2021-38357 SMS OVH <= 0.1 Reflected Cross-Site Scripting
The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1...
CVE-2021-38357 SMS OVH <= 0.1 Reflected Cross-Site Scripting
The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1...
CVE-2021-38357
CVE-2021-38357 affects the WordPress plugin SMS OVH (versions up to and including 0.1). The Reflected Cross‑Site Scripting vulnerability originates in the position parameter in the file ~/sms-ovh-sent.php, enabling injection of arbitrary web scripts. Connected sources consistently describe this i...
CVE-2021-38357: Improper Neutralization of Input During Web Page Generation
The SMS OVH WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1...
PT-2021-22077
Name of the Vulnerable Software and Affected Versions SMS OVH WordPress plugin versions up to and including 0.1 Description The issue concerns Reflected Cross-Site Scripting, allowing attackers to inject arbitrary web scripts via the position parameter found in the /sms-ovh-sent.php file...
SMS OVH <= 0.1 - Reflected Cross-Site Scripting
The plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts...