CVE-2021-25024 — Event Calendar < 1.1.51 - Reflected Cross-Site Scripting

CVE-2021-25024

Event Calendar < 1.1.51 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues

Affected (CNA)

Vendor / product	Versions
Unknown / EventCalendar	affected 1.1.51 before 1.1.51

CWE

CWE-79

References

https://wpscan.com/vulnerability/08864b76-d898-4dfe-970d-d7cc1b1115a7

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/08864b76-d898-4dfe-970d-d7cc1b1115a7