CVE-2024-4180

CRITICAL CVSS: 9.1 Published: 2024-06-04 Modified: 2026-06-17

Description

The Events Calendar WordPress plugin before 6.4.0.1 does not properly sanitize user-submitted content when rendering some views via AJAX.

Affected Platforms

Stellarwp The Events Calendar

Weakness Type

CWE-79

References