Unscored CVE-2021-24588 EUVD-2021-11500GHSA-22px-9px7-pc64

SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site Scripting

Published Sep 6, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting (XSS) vulnerability in the plugin's setting page.

Affected products

Vendor	Product	Affected	Fixed
—	SMS Alert Order Notifications – WooCommerce	3.4.7 – < 3.4.7	3.4.7

References

https://wpscan.com/vulnerability/dc2ce546-9da1-442c-8ee2-cd660634501f