Wordpress Modern Events Calendar Lite plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in the Wordpress Modern Events Calendar Lite plugin, which stems from inadequate cleaning of user-supplied data. A remote attacker could exploit this vulnerability to perform cross-site scripting (XSS) attacks.