title: SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site Scripting
description: The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting (XSS) vulnerability in the plugin's setting page.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: SMS Alert Order Notifications – WooCommerce
vendor: Unknown
versions:
lessThan: 3.4.7, status: affected, version: 3.4.7, versionType: custom
}