CVE-2021-24246 — WorkScout Core < 1.3.4 - Authenticated Stored XSS & XFS
The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to…
Published: 2021-05-05 · CVSS: Unscored
The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Frame Scripting issues
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7