CVE-2021-24724
N/A
N/A
Summary
The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and backend users when viewing the related event/s
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Timetable and Event Schedule by MotoPress | 2.3.19 < 2.3.19 | affected |
Weaknesses
- CWE-79: CWE-79 Cross-site Scripting (XSS)
ADP Enrichment
CVE Program Container
Additional References
- https://wpscan.com/vulnerability/c1194a1e-bf33-4f3f-a4a6-27b76b1b1eeb
- https://plugins.trac.wordpress.org/changeset/2573479/
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29235
References
- https://wpscan.com/vulnerability/c1194a1e-bf33-4f3f-a4a6-27b76b1b1eeb
- https://plugins.trac.wordpress.org/changeset/2573479/
- https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29235
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.