Lucene search
PRIOn knowledge basePRION:CVE-2021-24687HistoryOct 04, 2021 - 12:15 p.m.
Cross site scripting
2021-10-0412:15:00
PRIOn knowledge base
www.prio-n.com
7
0.001 Low
EPSS
Percentile
24.8%
The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| modern_events_calendar_lite | lt | 5.22.2 |
Related
nvd
nvd
CVE-2021-24687
2021-10-04 12:15:09
cve
cve
CVE-2021-24687
2021-10-04 12:15:09
patchstack
patchstack
wpvulndb
wpvulndb
Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting
2021-09-06 00:00:00
cvelist
cvelist
wpexploit
wpexploit
Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting
2021-09-06 00:00:00