CVE-2023-1978

CVE-2023-1978 describes a Reflected Cross-Site Scripting (XSS) in the WordPress plugin “ShiftController Employee Shift Scheduling” for versions

CVE-2024-9435

CVE-2024-9435 refers to the ShiftController Employee Shift Scheduling WordPress plugin. Affected versions up to and including 4.9.66 are vulnerable to a reflected Cross-Site Scripting (XSS) via URL keys due to insufficient input sanitization and output escaping. The vulnerability can be exploited...