CVE-2021-24588 SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site Scripting

2021-09-0611:09:28

CWE-79

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

37.5%

JSON

The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting (XSS) vulnerability in the plugin’s setting page.

CNA Affected

[
  {
    "product": "SMS Alert Order Notifications – WooCommerce",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.4.7",
        "status": "affected",
        "version": "3.4.7",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/dc2ce546-9da1-442c-8ee2-cd660634501f

0.001 Low

EPSS

Percentile

37.5%

JSON

Related for CVELIST:CVE-2021-24588