The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2022-01-17T13:00:31

Updated: 2024-08-03T19:49:14.665Z

Reserved: 2021-01-14T00:00:00

Link: CVE-2021-25024

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-01-17T13:15:07.747

Modified: 2024-11-21T05:54:12.467

Link: CVE-2021-25024

cve-icon Redhat

No data.