CVE-2021-24523
Daily Prayer Time < 2021.08.10 - Authenticated Stored XSS
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
13 sep 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
The Daily Prayer Time WordPress plugin before 2021.08.10 does not sanitise or escape some of its settings before outputting them in the page, leading to Authenticated Stored Cross-Site Scripting issues.
Productos afectados
Unknown · Daily Prayer Time