medium5.4
CVE-2021-24523
The Daily Prayer Time WordPress plugin before 2021.08.10 does not sanitise or escape some of its settings before outputting them in the page, leading to Authen…
Impact
The Daily Prayer Time WordPress plugin before 2021.08.10 does not sanitise or escape some of its settings before outputting them in the page, leading to Authenticated Stored Cross-Site Scripting issues.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mmrs151 | Daily Prayer Time | before 2021.08.10 |