Skip to content
OpenAdvisories
Unscored CVE-2021-24523 EUVD-2021-11435GHSA-68vv-fjgv-68v7

Daily Prayer Time < 2021.08.10 - Authenticated Stored XSS

Published Sep 13, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Daily Prayer Time WordPress plugin before 2021.08.10 does not sanitise or escape some of its settings before outputting them in the page, leading to Authenticated Stored Cross-Site Scripting issues.

Affected products

VendorProductAffectedFixed
— Daily Prayer Time 2021.08.10 – < 2021.08.10 2021.08.10

References