medium6.1
CVE-2019-15109
The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.
Impact
The the-events-calendar plugin before 4.8.2 for WordPress has XSS via the tribe_paged URL parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stellarwp | The Events Calendar | before 4.8.2 |