Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:48:19 +0000 CVE-2021-24687 — Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting https://cve.radiocsirt.org/vuln/cve-2021-24687 <p><strong>Affected:</strong> Unknown Modern Events Calendar Lite</p> <p>The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.</p> <p><strong>Affected:</strong> Unknown Modern Events Calendar Lite</p> <p>The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.</p> https://cve.radiocsirt.org/vuln/cve-2021-24687