CVE-2021-24876

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.1890%

EPSS Percentile2.97th

Published2021年11月29日

Last Modified2024年11月21日

Vulnerability Description

The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

Affected Platforms (CPE)

📦

Roundupwp

Registrations For The Events Calendar

< 2.7.5

References & Advisories

🔗 https://wpscan.com/vulnerability/e77c2493-993d-418d-9629-a1f07b5a2b6f

相關漏洞威脅

CVE-2021-249439.8

The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send...

CVE-2021-250836.1

The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it ...

CVE-2021-138810.0

A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could a...

CVE-2021-2132110.0

fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-r...