The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2021-06-01T11:33:29
Updated: 2024-08-03T19:28:23.445Z
Reserved: 2021-01-14T00:00:00
Link: CVE-2021-24309
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-06-01T14:15:08.787
Modified: 2024-11-21T05:52:48.863
Link: CVE-2021-24309
Redhat
No data.