Non notée
CVE-2021-24440 The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new…
Description
The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting issue. The payloads will be triggered when viewing the 'All Sheets' page in the admin dashboard
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sign-up Sheets 1.0 | premières → < 1.0.14 | 1.0.14 |
Autres CVE de Sign-up Sheets
Les 4 CVE de Sign-up Sheets →
CVE-2026-92410
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up…
4.3
Moyenne
CVE-2024-6020
The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the…
6.1
Moyenne
CVE-2021-24441
The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating…
Non notée