CVE-2021-24309

CVE-2021-24309: Weekly Schedule < 3.4.3 - Authenticated Stored XSS

Vendor Unknown
Product Weekly Schedule
Weakness CWE-79 · XSS
Published June 1, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue

Key dates

02Disclosure timeline

June 1, 2021 CVE published
August 3, 2024 Record updated