CVE-2021-24876

Registrations for The Events Calendar < 2.7.5 - Reflected Cross-Site Scripting

EPSS 1.2%CWE-79

The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

Affected products

Unknown · Registrations for the Events Calendar – Event Registration Plugin

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://wpscan.com/vulnerability/e77c2493-993d-418d-9629-a1f07b5a2b6f