Vulnerabilities > CVE-2021-24309 - Unspecified vulnerability in Weekly Schedule Project Weekly Schedule

047910
CVSS 5.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
weekly-schedule-project

Summary

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue

Vulnerable Configurations

Part Description Count
Application
Weekly_Schedule_Project
62