Medium severity4.8NVD Advisory· Published Aug 2, 2021· Updated Jun 17, 2026
CVE-2021-24480
CVE-2021-24480
Description
The Event Geek WordPress plugin through 2.5.2 does not sanitise or escape its "Use your own " setting before outputting it in the page, leading to an authenticated (admin+) stored Cross-Site Scripting issue
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:event_geek_project:event_geek:*:*:*:*:*:wordpress:*:*Range: <=2.5.2
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=2.5.2
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/243d417a-6fb9-4e17-9e12-a8c605f9af8anvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.