Read the docs

Business Hours Indicator Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Business Hours Indicator Project records in CISA KEV

No Business Hours Indicator Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Business Hours Indicator 1 record LOW

Records

1 record

TI-2021-06876 CVE-2021-24593 · GHSA-m8hc-gpvf-58px

Business Hours Indicator < 2.3.5 - Authenticated Stored XSS

Priority LOW 25

The Business Hours Indicator WordPress plugin before 2.3.5 does not sanitise or escape its 'Now closed message" setting when outputting it in the backend and frontend, leading to an Authenticated Stored Cross-Site Script…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2021-08-30 Fixed in 2.3.5 CWE-79
Open these records in search →