Not rated
CVE-2021-25024 The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in…
Description
The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EventCalendar 1.1 | earliest → < 1.1.51 | 1.1.51 |