Known CVE

Registrations for The Events Calendar < 2.7.5 - Authenticated Reflected Cross-Site Scripting

The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

CVE-2021-24876

Medium2021CVSS 6.1CWE-79

cve2021 · wordpress · wpscan · wp-plugin · wp · registrations-for-the-events-calendar · xss · authenticated

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website