| Package | Affected versions | Patched versions |
|---|---|---|
| eventcalendar | < 1.1.51 | 1.1.51 |
The EventCalendar WordPress plugin before 1.1.51 does not escape some user input before outputting it back in attributes, leading to Reflected Cross-SIte Scripting issues
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free