CVE-2021-24724CWE-79

Timetable and Event Schedule by MotoPress < 2.3.19 - Author+ Stored Cross-Site Scripting

published September 13, 2021

CVSS
—
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and backend users when viewing the related event/s

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00888 · 58.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-09-13T17:56Z
EPSS history
Timeline
  • 13 SEP 17:56Z
    Timetable and Event Schedule by MotoPress < 2.3.19 - Author+ Stored Cross-Site Scripting
    cvelistv5