CVE-2021-24876

The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

Date published : 2021-11-29

https://wpscan.com/vulnerability/e77c2493-993d-418d-9629-a1f07b5a2b6f