← CVE Intelligence

CVE-2021-24670

CoolClock < 4.3.5 - Contributor+ Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The CoolClock WordPress plugin before 4.3.5 does not escape some shortcode attributes, allowing users with a role as low as Contributor toperform Stored Cross-Site Scripting attacks

Affected (CNA)

Vendor / productVersions
Unknown / CoolClock – a Javascript Analog Clockaffected 4.3.5 before 4.3.5

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.