Files
CVEs-PoC/2021/CVE-2021-24309.md
T
2024-06-18 02:51:15 +02:00

785 B

CVE-2021-24309

Description

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue

POC

Reference

Github

No PoCs found on GitHub currently.