Input validation vulnerability in TelSender – Wp to telegram СF 7, Events, Wpforms, Ninja forms, Wooccommerce 1.14.14

A plugin called TelSender for WordPress is at risk for a type of cyber attack called DOM-Based Cross-Site Scripting. This can happen in versions 1.14.14 and lower. The issue is that the plugin does not properly check for harmful code when handling responses from the Telegram API. This means that attackers who are not logged in can insert harmful code into the titles of Telegram chats. When an administrator of the website opens the TelSender settings page and clicks the “Tested” button, the malicious code can be executed.