← CVE Intelligence

CVE-2021-24593

Business Hours Indicator < 2.3.5 - Authenticated Stored XSS PUBLISHED

Description (CNA)

The Business Hours Indicator WordPress plugin before 2.3.5 does not sanitise or escape its 'Now closed message" setting when outputting it in the backend and frontend, leading to an Authenticated Stored Cross-Site Scripting issue

Affected (CNA)

Vendor / productVersions
Unknown / Business Hours Indicatoraffected 2.3.5 before 2.3.5

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.