https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T12:04:31.151912+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-j4v8-4289-whj4 GHSA-j4v8-4289-whj4 2026-10-29T12:04:31.163014+00:00

The افزونه پیامک ووکامرس | Persian WooCommerce SMS WordPress plugin before 7.3.2 does not sanitise and escape a parameter before reflecting it back into an HTML attribute, leading to Reflected Cross-Site Scripting that is executed in the browser session of a logged-in privileged user who is tricked into submitting a crafted cross-site request.