UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-111021
The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise and escape a parameter before reflecting it back into an HTML attribute, leading to Reflected Cross-Site Scripting that is executed in the browser session of a logged-in privileged user who is tricked into submitting a crafted cross-site request.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-28T07:36:37.585298+00:00
- Cve id
- CVE-2026-111021
- First seen by Signal
- 2026-10-28T07:37:41+00:00
- Retrieved at
- 2026-10-28T07:37:41+00:00
- Published at
- 2026-10-28T06:16:34.080
- Last modified
- 2026-10-28T06:16:34.080
Explore deeper with Ninja Signal's threat intelligence graph