CVE-2021-24149

Unvalidated input in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.6, did not sanitise the mecpostid POST parameter in the mecfesform AJAX action when logged in as an author+, leading to an authenticated SQL Injection issue...

CVE-2021-24149

creationtimestamp| type| source ---|---|--- 2021-03-18 17:32:27+00:00| seen| https://t.me/cibsecurity/25107...

CVE-2021-24149

Unvalidated input in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.6, did not sanitise the mecpostid POST parameter in the mecfesform AJAX action when logged in as an author+, leading to an authenticated SQL Injection issue...

CVE-2021-24149

CVE-2021-24149 affects WordPress plugin Modern Events Calendar Lite