Description (CNA)
The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / WP SMS | affected 5.4.13 before 5.4.13 |
CWE
CWE-79
References
- https://wpscan.com/vulnerability/5433ef4c-4451-4b6e-992b-69c5eccabf90
- https://plugins.trac.wordpress.org/changeset/2570762/wp-sms
ADP enrichment
No English description supplied.