CVE-2021-24309: Weekly Schedule Project Weekly Schedule

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue

Affected products

• Weekly Schedule Project Weekly Schedule: before 3.4.3 (fixed in 3.4.3)

Published 2021-06-01. Last modified 2026-06-17.