2 matches found
Cross site scripting
The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wpgroupname" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue...
3.5CVSS5.3AI score0.00671EPSS
SaveExploits2References2Affected Software1
CVE-2021-24561: Improper Neutralization of Input During Web Page Generation
The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wpgroupname" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue...
5.4CVSS5.8AI score0.00671EPSS
SaveExploits2References2
20