Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-15109

The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.