Medium severity4.8NVD Advisory· Published Jul 12, 2021· Updated Jun 17, 2026
CVE-2021-24440
CVE-2021-24440
Description
The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting issue. The payloads will be triggered when viewing the 'All Sheets' page in the admin dashboard
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:fetchdesigns:sign-up_sheets:*:*:*:*:*:wordpress:*:*Range: <1.0.14
- WordPress/Sign-up Sheetsdescription
- Range: <1.0.14
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/ba4503f7-684e-4274-bc53-3aa848712496nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.