7.6
High
CVE-2025-49315 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PersianScript…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PersianScript Persian Woocommerce SMS persian-woocommerce-sms allows SQL Injection.This issue affects Persian Woocommerce SMS: from n/a through <= 7.0.10.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Persian Woocommerce SMS 7.0 | earliest → 7.0.10 | No fix stated |
Other CVEs of Persian Woocommerce SMS
The 4 CVEs of Persian Woocommerce SMS →
CVE-2026-65532
Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions
7.6
High
CVE-2026-22352
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript…
7.1
High
CVE-2024-54312
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PersianScript…
7.1
High