CVE-2021-25024

creationtimestamp| type| source ---|---|--- 2022-01-17 16:23:09+00:00| seen| https://t.me/cibsecurity/35660...

CVE-2021-25024

The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues...

CVE-2021-25024

CVE-2021-25024 affects the WordPress EventCalendar plugin (pre-1.1.51). The vulnerability is a reflected cross-site scripting (XSS) issue caused by the plugin not escaping certain user input before outputting it into HTML attributes. Impact is reflected XSS, enabling an attacker to execute script...