Threats tagged 'ghsa-fhvg-rf7x-ccx7'

A stored cross-site scripting (XSS) vulnerability exists in The Events Calendar plugin by Liquid Web / StellarWP, affecting versions up to 6.18.2. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers with limited privileges to execute scripts in the context of other users. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.