CVE-2021-24716: Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting
The Modern Events Calendar Lite WordPress plugin before 5.22.3 does not properly sanitize or escape values set by users with access to adjust settings withing wp-admin.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-24716?
CVE-2021-24716 is a vulnerability in the Modern Events Calendar Lite WordPress plugin before version 5.22.3 that allows users with access to adjust settings within wp-admin to set values without proper sanitization or escaping.
How severe is CVE-2021-24716?
CVE-2021-24716 has a severity score of 5.4, which is considered medium.
How does CVE-2021-24716 affect the Modern Events Calendar Lite WordPress plugin?
CVE-2021-24716 affects the Modern Events Calendar Lite WordPress plugin before version 5.22.3, allowing users with access to adjust settings within wp-admin to set values without proper sanitization or escaping.
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-24716?
The CWE ID for CVE-2021-24716 is CWE-79, which is a vulnerability that involves the improper neutralization of input during web page generation.
How can I fix CVE-2021-24716 in the Modern Events Calendar Lite WordPress plugin?
To fix CVE-2021-24716, it is recommended to update the Modern Events Calendar Lite WordPress plugin to version 5.22.3 or later.