CVE-2021-24716 — Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting

CVE-2021-24716

Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting PUBLISHED

Description (CNA)

The Modern Events Calendar Lite WordPress plugin before 5.22.3 does not properly sanitize or escape values set by users with access to adjust settings withing wp-admin.

Affected (CNA)

Vendor / product	Versions
Unknown / Modern Events Calendar Lite	affected 5.22.3 before 5.22.3

CWE

CWE-79

References

https://wpscan.com/vulnerability/576cc93d-1499-452b-97dd-80f69002e2a0

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/576cc93d-1499-452b-97dd-80f69002e2a0