6.5
Moyenne
CVE-2025-62903 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPClever WPC Smart…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPClever WPC Smart Messages for WooCommerce wpc-smart-messages allows Stored XSS.This issue affects WPC Smart Messages for WooCommerce: from n/a through <= 4.2.8.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WPC Smart Messages for WooCommerce 4.2 | premières → 4.2.8 | Pas de correctif indiqué |
Autres CVE de WPC Smart Messages for WooCommerce
Les 4 CVE de WPC Smart Messages for WooCommerce →
CVE-2026-6725
The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
6.4
Moyenne
CVE-2024-10437
The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to unauthorized Smar Message…
4.3
Moyenne
CVE-2024-10436
The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,…
8.8
Élevée