VULNERABILITY INTELLIGENCE

CVE-2021-24724

CVSS score5.4 MEDIUM
EPSS probability0.89%
CISA KEVNot currently listed
Published2021-09-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The Timetable and Event Schedule by MotoPress WordPress plugin before 2.3.19 does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and backend users when viewing the related event/s

Weakness classification

  • contact@wpscan.com: CWE-79

Primary references