WordPress Modern Events Calendar Lite: Cross-site Script Vulnerability

Wordpress Modern Events Calendar Lite is Wordpress open source plugin for an application. The plugin is used to manage the best tools for events website. A cross-site scripting vulnerability exists in the Modern Events Calendar Lite WordPress plugin versions prior to 5.16.5. The vulnerability ste...

PT-2021-15693

Name of the Vulnerable Software and Affected Versions: Modern Events Calendar Lite WordPress plugin versions prior to 5.16.5 Description: The issue is related to unvalidated input and lack of output encoding in the plugin. Specifically, the mic comment field, also known as 'Notes on time', is not...