CVE-2021-24440: Fetchdesigns Sign-Up Sheets

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting issue. The payloads will be triggered when viewing the 'All Sheets' page in the admin dashboard

Affected products

• Fetchdesigns Sign-Up Sheets: before 1.0.14 (fixed in 1.0.14)

Published 2021-07-12. Last modified 2026-06-17.