CVE-2021-24716
Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
01 Nov 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Modern Events Calendar Lite WordPress plugin before 5.22.3 does not properly sanitize or escape values set by users with access to adjust settings withing wp-admin.
Affected products
Unknown · Modern Events Calendar Lite