PT-2021-16045 · WordPress · Daily Prayer Time

Name of the Vulnerable Software and Affected Versions: The Daily Prayer Time WordPress plugin versions prior to 2021.08.10 Description: The issue is related to Authenticated Stored Cross-Site Scripting. It occurs because the plugin does not properly sanitise or escape some of its settings before...

Daily Prayer Time < 2021.08.10 - Authenticated Stored XSS

The plugin does not sanitise or escape some of its settings before outputting them in the page, leading to Authenticated Stored Cross-Site Scripting issues. Put the following payload in the Fajr, Sunrise, Zuhr, Asr, Maghrib and/or Isha field of the Language settings of the plugin...