Lucene search

K
patchstackTsutomu AramakiPATCHSTACK:3BB7881BCC266B3594328B649303AAA5
HistoryJun 01, 2022 - 12:00 a.m.

WordPress Modern Events Calendar Lite plugin < 6.3.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

2022-06-0100:00:00
Tsutomu Aramaki
patchstack.com
10

0.001 Low

EPSS

Percentile

23.0%

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Tsutomu Aramaki (Mitsui Bussan Secure Directions, Inc) in WordPress Modern Events Calendar Lite plugin (versions < 6.3.0).

Solution

           Fixed in version 6.3.0, but the plugin is closed. This plugin has been closed as of May 11, 2022 and is not available for download. This closure is permanent.
CPENameOperatorVersion
modern events calendar litelt6.3.0

0.001 Low

EPSS

Percentile

23.0%

Related for PATCHSTACK:3BB7881BCC266B3594328B649303AAA5