Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24561

WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting

Description

The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP SMS

  • 5.4.13 to < 5.4.13affected

References