Filtered by vendor Theeventscalendar Subscriptions
Filtered by product Eventcalendar Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-25024 1 Theeventscalendar 1 Eventcalendar 2024-08-03 6.1 Medium
The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues
CVE-2021-25025 1 Theeventscalendar 1 Eventcalendar 2024-08-03 4.3 Medium
The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create events