2 matches found
Cross site scripting
Multiple Stored Cross-site scripting XSS vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users with minimal permissions to inject arbitrary JavaScript, HTML, or CSS via Ajax actions. This affects mecsavenotifications and...
3.5CVSS5.4AI score0.01024EPSS
SaveExploits1References2Affected Software1
CVE-2020-9459: Improper Neutralization of Input During Web Page Generation
Multiple Stored Cross-site scripting XSS vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users with minimal permissions to inject arbitrary JavaScript, HTML, or CSS via Ajax actions. This affects mecsavenotifications and...
5.4CVSS6.1AI score0.01024EPSS
SaveExploits1References2
20