CVE-2021-25046: Webnus Modern Events Calendar Lite

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Modern Events Calendar Lite WordPress plugin before 6.2.0 alloed any logged-in user, even a subscriber user, may add a category whose parameters are incorrectly escaped in the admin panel, leading to stored XSS.

Affected products

• Webnus Modern Events Calendar Lite: before 6.2.0 (fixed in 6.2.0)

Published 2022-01-17. Last modified 2026-06-17.