High · 7.1 CVE-2023-29424 EUVD-2023-32993GHSA-76j7-5gg4-8fv4

WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Scripting (XSS)

Published Jun 26, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Plainware ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions.

Vendor	Product	Affected	Fixed
Plainware	ShiftController Employee Shift Scheduling	≤ 4.9.23	—