Non notée
CVE-2021-25024 The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in…
Description
The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EventCalendar 1.1 | premières → < 1.1.51 | 1.1.51 |