CVE-2021-24440 — Sign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)
The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in the…
Published: 2021-07-12 · CVSS: Unscored
The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting issue. The payloads will be triggered when viewing the 'All Sheets' page in the admin dashboard
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7