Filtered by vendor Theeventscalendar
Subscriptions
Filtered by product Eventcalendar
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2021-25025 | 1 Theeventscalendar | 1 Eventcalendar | 2024-11-21 | 4.3 Medium |
| The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create events | ||||
| CVE-2021-25024 | 1 Theeventscalendar | 1 Eventcalendar | 2024-11-21 | 6.1 Medium |
| The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues | ||||
Page 1 of 1.