CVE-2021-25083

The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it back in an attribute in the settings page, leading to a Reflected Cross-Site Scripting...

CVE-2021-25083

CVE-2021-25083 affects the WordPress plugin Registrations for the Events Calendar (versions before 2.7.10). The issue is that the qtype parameter is not escaped before being echoed back in an attribute on the settings page, causing a reflected XSS vulnerability. Impact is client-side JavaScript e...