Lucene search

K
patchstackKrzysztof ZającPATCHSTACK:4036C2260095CB62C0EFB98C6DCD3765
HistoryDec 14, 2021 - 12:00 a.m.

WordPress Modern Events Calendar Lite plugin <= 6.1.6 - Category Add leading to Stored Cross-Site Scripting (XSS) vulnerability

2021-12-1400:00:00
Krzysztof Zając
patchstack.com
2

0.001 Low

EPSS

Percentile

25.0%

Category Add leading to Stored Cross-Site Scripting (XSS) vulnerability discovered by Krzysztof Zając in WordPress Modern Events Calendar Lite plugin (versions <= 6.1.6).

Solution

           Update the WordPress Modern Events Calendar Lite plugin to the latest available version (at least 6.2.0).
CPENameOperatorVersion
modern events calendar litele6.1.6

0.001 Low

EPSS

Percentile

25.0%

Related for PATCHSTACK:4036C2260095CB62C0EFB98C6DCD3765