Lucene search
Asif Nawaz MinhasWPEX-ID:832FE086-1D33-430B-BDB5-E444761576B2HistoryAug 10, 2021 - 12:00 a.m.
Daily Prayer Time < 2021.08.10 - Authenticated Stored XSS
2021-08-1000:00:00
Asif Nawaz Minhas
299
0.001 Low
EPSS
Percentile
24.8%
The plugin does not sanitise or escape some of its settings before outputting them in the page, leading to Authenticated Stored Cross-Site Scripting issues.
Put the following payload in the Fajr, Sunrise, Zuhr, Asr, Maghrib and/or Isha field of the Language settings of the plugin (/wp-admin/admin.php?page=dpt#tabs-2): <img/src/onerror=prompt(/XSS/)>
The XSS will be triggered in the plugin's settings, as well as any post/page with the [monthlytable] embedRelated
patchstack
patchstack
nvd
nvd
CVE-2021-24523
2021-09-13 18:15:16
cve
cve
CVE-2021-24523
2021-09-13 18:15:16
cvelist
cvelist
CVE-2021-24523 Daily Prayer Time < 2021.08.10 - Authenticated Stored XSS
2021-09-13 17:56:24
prion
prion
Cross site scripting
2021-09-13 18:15:00
wpvulndb
wpvulndb
Daily Prayer Time < 2021.08.10 - Authenticated Stored XSS
2021-08-10 00:00:00