CVE-2021-24309

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the...

CVE-2021-24309 Weekly Schedule < 3.4.3 - Authenticated Stored XSS

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the HTML tags and cause a stored XSS issue...

CVE-2021-24309

CVE-2021-24309 affects the WordPress Weekly Schedule plugin prior to version 3.4.3, where the Schedule Name input was not properly sanitized, enabling authenticated users to inject JavaScript via [removed] tags and trigger a stored XSS. Affected component: the plugin’s general options Schedule Na...