Threats tagged 'ghsa-j4v8-4289-whj4'

The Persian WooCommerce SMS WordPress plugin versions before 7.3.2 contain a reflected cross-site scripting (XSS) vulnerability. This occurs because the plugin does not properly sanitize and escape a parameter before reflecting it into an HTML attribute. The vulnerability can be exploited when a logged-in privileged user is tricked into submitting a crafted cross-site request, leading to script execution in their browser session.