The SMS Alert Order Notifications WordPress plugin before 3.4.7 is affected by a cross site scripting (XSS) vulnerability in the plugin's setting page.Creditsswapnil bodekarReferenceshttps://wpscan.com/vulnerability/dc2ce546-9da1-442c-8ee2-cd660634501f