CVE-2021-24664

MEDIUM 4.8CVE-2021-24664 · Published 08/11/2021 · updated 17/06/2026

In short

CVE-2021-24664 is a MEDIUM (CVSS 4.8) vulnerability affecting wpschoolpress (igexsolutions).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 83.8% of all vulnerabilities.
Fix: update to 2.1.17 or later.

Package	Affected versions	Patched versions
wpschoolpress igexsolutions	`< 2.1.17`	`2.1.17`

Description

The School Management System – WPSchoolPress WordPress plugin before 2.1.17 sanitise some fields using sanitize_text_field() but does not escape them before outputting in attributes, resulting in Stored Cross-Site Scripting issues.

References

packetstormsecurity.com/files/164974/WordPress-WPSchoolPress-2.1.16-Cross-Site-Scripting.html · Third Party Advisory
wpscan.com/vulnerability/3f8e170c-6579-4b1a-a1ac-7d93da17b669 · Exploit

More vulnerabilities in wpschoolpress

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wpschoolpress

igexsolutions

< 2.1.17

2.1.17

More vulnerabilities in wpschoolpress

See all →