Non notée
CVE-2021-25025 The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the…
Description
The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create events
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EventCalendar 1.1 | premières → < 1.1.51 | 1.1.51 |