CVE-2021-24498

PoC —

CVSS 3.1

6.1 medium

EPSS

4%p89

Published

Aug 2, 2021 (Aug 2, 2021)

Modified

Jun 17, 2026

Description

The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the page (via php/edit.php), leading to a reflected Cross-Site Scripting issue.

Vendors: dwbooster
Products: calendar event multi view
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news0 stories

No ingested article mentions this CVE yet.