Non notée
CVE-2021-24309 The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize…
Description
The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Weekly Schedule 3.4 | premières → < 3.4.3 | 3.4.3 |