Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24309

Weekly Schedule < 3.4.3 - Authenticated Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Weekly Schedule

  • 3.4.3 to < 3.4.3affected

References