Lucene search
WPScanCVELIST:CVE-2021-24593HistoryAug 30, 2021 - 2:11 p.m.
CVE-2021-24593 Business Hours Indicator < 2.3.5 - Authenticated Stored XSS
2021-08-3014:11:25
CWE-79
WPScan
www.cve.org
4
business hours indicator
authenticated
xss
wordpress
EPSS
0.001
Percentile
24.8%
The Business Hours Indicator WordPress plugin before 2.3.5 does not sanitise or escape its 'Now closed message" setting when outputting it in the backend and frontend, leading to an Authenticated Stored Cross-Site Scripting issue
CNA Affected
[
{
"product": "Business Hours Indicator",
"vendor": "Unknown",
"versions": [
{
"lessThan": "2.3.5",
"status": "affected",
"version": "2.3.5",
"versionType": "custom"
}
]
}
]Related
prion
prion
Cross site scripting
2021-08-30 15:15:00
wpvulndb
wpvulndb
Business Hours Indicator < 2.3.5 - Authenticated Stored XSS
2021-08-02 00:00:00
patchstack
patchstack
wpexploit
wpexploit
Business Hours Indicator < 2.3.5 - Authenticated Stored XSS
2021-08-02 00:00:00
cve
cve
CVE-2021-24593
2021-08-30 15:15:07
nvd
nvd
CVE-2021-24593
2021-08-30 15:15:07