CVE-2021-24876

The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

Affected products

Events Calendar

Roundupwp Registrations For The Events Calendar

< 2.7.5

Fix

Available

CVSS 3.1

6.1 MEDIUM

EPSS

1.2% (66th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2021-11-29