Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-4180

The Events Calendar < 6.4.0.1 - Reflected XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Events Calendar WordPress plugin before 6.4.0.1 does not properly sanitize user-submitted content when rendering some views via AJAX.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown The Events Calendar

Default version status: unaffected

  • 0 to < 6.4.0.1affected

References