Lucene search
PRIOn knowledge basePRION:CVE-2021-24925HistoryDec 13, 2021 - 11:15 a.m.
Cross site scripting
2021-12-1311:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
44.3%
The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the current_month_divider parameter of its mec_list_load_more AJAX call (available to both unauthenticated and authenticated users) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue
| CPE | Name | Operator | Version |
|---|---|---|---|
| modern_events_calendar_lite | lt | 6.1.5 |
Related
cvelist
cvelist
wpexploit
wpexploit
Modern Events Calendar Lite < 6.1.5 - Reflected Cross-Site Scripting
2021-11-15 00:00:00
cnvd
cnvd
WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-102799)
2021-12-15 00:00:00
wpvulndb
wpvulndb
Modern Events Calendar Lite < 6.1.5 - Reflected Cross-Site Scripting
2021-11-15 00:00:00
nvd
nvd
CVE-2021-24925
2021-12-13 11:15:09
cve
cve
CVE-2021-24925
2021-12-13 11:15:09
openvas
openvas