The Daily Prayer Time WordPress plugin before 2021.08.10 does not sanitise or escape some of its settings before outputting them in the page, leading to Authenticated Stored Cross-Site Scripting issues.
CPE | Name | Operator | Version |
---|---|---|---|
daily_prayer_time | lt | 2021.08.10 |