VULNERABILITY INTELLIGENCE

CVE-2021-24593

CVSS score5.4 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2021-08-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The Business Hours Indicator WordPress plugin before 2.3.5 does not sanitise or escape its 'Now closed message" setting when outputting it in the backend and frontend, leading to an Authenticated Stored Cross-Site Scripting issue

Weakness classification

  • contact@wpscan.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references