CVE-2021-24876

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.1890%

EPSS Percentile2.97th

Published2021年11月29日

Last Modified2024年11月21日

Vulnerability Description

The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

Affected Platforms (CPE)

📦

Roundupwp

Registrations For The Events Calendar

< 2.7.5

References & Advisories

🔗 https://wpscan.com/vulnerability/e77c2493-993d-418d-9629-a1f07b5a2b6f

関連する脆弱性情報

CVE-2021-249439.8

The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send...

CVE-2021-250836.1

The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it ...

CVE-2021-3303210.0

A Remote Code Execution (RCE) vulnerability in the WebUI component of the eQ-3 HomeMatic CCU2 firmware up to and including version...

CVE-2021-3477010.0

A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software fo...