Not rated

CVE-2021-24561 The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in…

Description

The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue

Affected products and versions

Product	Affected versions	Fixed in
WP SMS 5.4	earliest → < 5.4.13	5.4.13

Do you use WP SMS?

Track this CVE Watch WP SMS Check my SBOMs

www.cveye.io/en/cve/CVE-2021-24561

Timeline

Published August 23, 2021
Last modified August 3, 2024

References

wpscan.com wpscan.com
plugins.trac.wordpress.org plugins.trac.wordpress.org

Track this CVE