Not rated
CVE-2021-24309 The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize…
Description
The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Weekly Schedule 3.4 | earliest → < 3.4.3 | 3.4.3 |