TI-2024-08070 CVE-2024-8701 · GHSA-m7hp-64f5-g5frEvent Calendar <= 1.0.4 - Admin+ Stored XSSPriority MEDIUM 55The events-calendar WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfi…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00326 · Published 2025-05-15 · No fix listed CWE-79