Eventcalendar@* Security Vulnerabilities and Issues — Eventcalendar@* CVE List

Lucene search

TheeventscalendarEventcalendar*

2 matches found

CVE•added 2022/01/17 1:15 p.m.•36 views

CVE-2021-25025

The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with a role as low as subscriber to create events

4.3CVSS4.5AI score0.00104EPSS

CVE•added 2022/01/17 1:15 p.m.•32 views

CVE-2021-25024

The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues

6.1CVSS6.1AI score0.0021EPSS