Vulnerabilities > Webnus > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-02-28 CVE-2020-9459 Cross-site Scripting vulnerability in Webnus Modern Events Calendar Lite
Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to inject arbitrary JavaScript, HTML, or CSS via Ajax actions.
network
low complexity
webnus CWE-79
5.4