Lucene search
PRIOn knowledge basePRION:CVE-2021-24927HistoryNov 29, 2021 - 9:15 a.m.
Cross site scripting
2021-11-2909:15:00
PRIOn knowledge base
www.prio-n.com
1
0.001 Low
EPSS
Percentile
24.9%
The My Calendar WordPress plugin before 3.2.18 does not sanitise and escape the callback parameter of the mc_post_lookup AJAX action (available to any authenticated user) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue
| CPE | Name | Operator | Version |
|---|---|---|---|
| my_calendar | lt | 3.2.18 |
Related
cve
cve
CVE-2021-24927
2021-11-29 09:15:08
cvelist
cvelist
wpvulndb
wpvulndb
My Calendar < 3.2.18 - Subscriber+ Reflected Cross-Site Scripting
2021-11-01 00:00:00
nvd
nvd
CVE-2021-24927
2021-11-29 09:15:08
cnvd
cnvd
WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-102402)
2021-12-01 00:00:00
wpexploit
wpexploit
My Calendar < 3.2.18 - Subscriber+ Reflected Cross-Site Scripting
2021-11-01 00:00:00