title: WP SMS < 5.4.13 - Authenticated Stored Cross-Site Scripting
description: The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: WP SMS
vendor: Unknown
versions:
lessThan: 5.4.13, status: affected, version: 5.4.13, versionType: custom
}