TI-2024-10596 CVE-2024-11434 · GHSA-crq7-ccpx-cj9j
WP – Bulk SMS – by SMS.to <= 1.0.12 - Reflected Cross-Site Scripting
Priority LOW 27
The WP – Bulk SMS – by SMS.to plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output e…