CVE-2021-25083

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.1650%

EPSS Percentile12.71th

Published2022年1月24日

Last Modified2024年11月21日

Vulnerability Description

The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it back in an attribute in the settings page, leading to a Reflected Cross-Site Scripting

Affected Platforms (CPE)

📦

Roundupwp

Registrations For The Events Calendar

<= 2.7.10

References & Advisories

🔗 https://plugins.trac.wordpress.org/changeset/2648377

🔗 https://wpscan.com/vulnerability/9b69544d-6a08-4757-901b-6ccf1cd00ecc