Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Weekly Schedule Project Clear all filters
TI-2021-06601 CVE-2021-24309 · GHSA-c864-88h8-cf2j

Weekly Schedule < 3.4.3 - Authenticated Stored XSS

Priority LOW 25

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XS…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2021-06-01 Fixed in 3.4.3 CWE-79