Lucene search
PRIOn knowledge basePRION:CVE-2020-9459HistoryFeb 28, 2020 - 9:15 p.m.
Cross site scripting
2020-02-2821:15:00
PRIOn knowledge base
www.prio-n.com
5
Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to inject arbitrary JavaScript, HTML, or CSS via Ajax actions. This affects mec_save_notifications and import_settings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| modern_events_calendar_lite | le | 5.1.6 |
Related
openvas
openvas
WordPress Modern Events Calendar Lite Plugin <= 5.1.6 XSS Vulnerability
2020-03-05 00:00:00
patchstack
patchstack
cve
cve
CVE-2020-9459
2020-02-28 21:15:13
osv
osv
CVE-2020-9459
2020-02-28 21:15:13
wpvulndb
wpvulndb
Modern Events Calendar Lite < 5.1.7 - Multiple Subscriber+ Stored XSS
2020-02-27 00:00:00
cvelist
cvelist
CVE-2020-9459
2020-02-28 20:51:53
nvd
nvd
CVE-2020-9459
2020-02-28 21:15:13