CVE-2021-24687
04.10.2021, 12:15
The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| Vendor | Product | Version |
|---|---|---|
| webnus | modern_events_calendar_lite | 𝑥 < 5.22.2 |
𝑥
= Vulnerable software versions