Threats tagged 'ghsa-fwpv-8w5r-6h2x'

The SMS for WordPress plugin is vulnerable to reflected cross-site scripting (XSS) via the 'paged' parameter in all versions up to and including 1.1.8. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts that execute when a user interacts with a crafted link.