QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-24664

Back to search

CVE-2021-24664

Published: Nov 8, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitize_text_field() but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues.

VendorProductVersions

Unknown

School Management System – WPSchoolPress

affected
2.1.17 - < 2.1.17

Weaknesses (CWE)

CWE-79

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now