Registrations for the Events Calendar vulnerabilities
We track 1 vulnerability in Registrations for the Events Calendar products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 8, 2024.
1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score
Latest Registrations for the Events Calendar vulnerabilities
- 9.6 Critical severity
Registrations for the Events Calendar: Improper Neutralization of Input During Web Page Generation
The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.