critical9.1
CVE-2024-4180
The Events Calendar WordPress plugin before 6.4.0.1 does not properly sanitize user-submitted content when rendering some views via AJAX.
Impact
The Events Calendar WordPress plugin before 6.4.0.1 does not properly sanitize user-submitted content when rendering some views via AJAX.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stellarwp | The Events Calendar | before 6.4.0.1 |