Theeventscalendar Eventcalendar
2 CVEs affecting Theeventscalendar Eventcalendar. Latest disclosed: 2022-01-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-25024 | Medium | 6.1 | 2022-01-17 | The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scrip… |
CVE-2021-25025 | Medium | 4.3 | 2022-01-17 | The EventCalendar WordPress plugin before 1.1.51 does not have proper authorisation and CSRF checks in the add_calendar_event AJAX actions, allowing users with… |