Description
The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it back in an attribute in the settings page, leading to a Reflected Cross-Site Scripting
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Registrations for the Events Calendar – Event Registration Plugin | 2.7.10 – < 2.7.10 | 2.7.10 |