TI-2021-15939 CVE-2021-38332 · GHSA-h4rw-rm6c-ghvcOn Page SEO + Whatsapp Chat Button <= 1.0.1 Reflected Cross-Site ScriptingPriority LOW 29The On Page SEO + Whatsapp Chat Button Plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~/settings.php file which allows attackers to inject arb…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00895 · Published 2021-09-10 · No fix listed CWE-79