CVE-2021-24523

The Daily Prayer Time WordPress plugin before 2021.08.10 does not sanitise or escape some of its settings before outputting them in the page, leading to Authenticated Stored Cross-Site Scripting issues...

CVE-2021-24523

The CVE-2021-24523 entry refers to the WordPress plugin Daily Prayer Time (versions prior to 2021.08.10), where an Authenticated Stored Cross-Site Scripting (XSS) vulnerability exists because the plugin does not sanitise or escape some settings before output. The issue affects output in plugin pa...