CVE-2021-24146CWE-284
Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export
published March 18, 2021
What it is
Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.31043 · 98.3th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2021-03-18T14:57Z
EPSS history
Timeline